Metasploit 3.0 Beta 3 Released

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history) from Chrome/Edge/Brave (via App‑Bound Encryption bypass using a headless Chromium process and IElevator DLL injection), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It outputs structured JSON, includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is presented as a red‑team tool while also posing an adversary capability; the report includes attack scenarios, detection opportunities (monitor IElevator use, unexpected headless Chromium/spawn/injection, non‑browser reads of Login Data/Cookies/Web Data) and mitigation advice such as using external credential managers.