Metasploit Exploit Framework Version 3.0 Released

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from Chromium-based browsers and Firefox. It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface, uses DPAPI recovery for certain browsers, and NSS decryption for Firefox; output is structured JSON for red-team use and it includes multiple evasion features designed to reduce EDR detection risk.