Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers on Windows, including a DLL injection + IElevator COM bypass to defeat Chrome's App-Bound Encryption. It extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks, includes evasion features to reduce EDR detection, and is presented as a red-team utility for assumed-breach engagements; detection opportunities and mitigations are also discussed.