Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials (saved passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox by bypassing App‑Bound Encryption (via headless Chromium + DLL injection and the IElevator COM interface), DPAPI, or NSS decryption; the report details technical operation, evasion techniques, attack scenarios, detection points, and mitigations for red‑team and defensive testing.