Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from major Chromium‑based and Firefox browsers on Windows. It implements an IElevator COM-based App‑Bound Encryption bypass for Chrome/Edge/Brave via Early Bird APC DLL injection, handles DPAPI and NSS models for other browsers, and includes operational evasion features; the report describes usage scenarios, detection opportunities, and mitigation recommendations.