Acunetix WVS, IBM Rational AppScan & HP WebInspect

DumpBrowserSecrets is a publicly released post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). The tool uses a compiled executable plus a DLL injected into a headless Chromium process (Early Bird APC) to decrypt app_bound_encrypted_key via the IElevator COM interface, includes evasion features for EDR, outputs structured JSON, and is intended for red team/assumed‑breach testing but could be repurposed by attackers.