Acunetix OVS Review (Online Vulnerability Scanner)

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers on Windows; it implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and outputs structured JSON. The report covers technical internals, operational evasion techniques, an example attack scenario, detection opportunities, and mitigation recommendations.