Acunetix Web Vulnerability Scanner (WVS) 6.5 Released

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card details, autofill data and browsing history from major Chromium-based browsers and Firefox; it bypasses Chrome App-Bound Encryption by injecting a DLL into a headless Chromium process to leverage the IElevator COM interface and supports DPAPI and NSS decryption for other browsers. Built with operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) and structured JSON output, the tool is positioned for red-team assumed-breach exercises but presents a realistic threat vector for lateral movement and cloud account takeover if misused.