Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a public red-team post-exploitation tool that extracts browser-stored credentials (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium- and Gecko-based browsers on Windows by using techniques including headless Chromium spawning, Early Bird APC DLL injection, IElevator COM interface to bypass App-Bound Encryption, DPAPI and NSS decryption, and several operational evasion features; the report explains usage, extracted output, attack scenarios, detection opportunities, and mitigation recommendations.