Mozilla Firefox Password Stealer

Networking/Security Forums -> Exploits // System Weaknesses

Author: Rezo PostPosted: Wed Mar 11, 2009 7:28 pm    Post subject: Mozilla Firefox Password Stealer
    ----
Here's a simple and effective local weakness in Mozilla Firefox.

If a user sets FF to save passwords, then you can recover them.

At the top, go to TOOLS : OPTIONS : SECURITY : PASSWORDS : SAVED PASSWORDS : SHOW PASSWORDS

Done.

You now have a full list of the users accounts and passwords. Some people use the same passes for sites as email.. so you can just imagine what this set might unlock.

-Rezo

Author: capiLocation: Portugal PostPosted: Wed Jan 19, 2011 5:23 pm    Post subject:
    ----
This is the same as on any other browser; the password information has to be stored in a reversible form if the browser is to make use of it automatically.

You can however protect the stored passwords by entering a master password -- that way, the password information will be stored in encrypted form, and it will only be available once you enter the master password.

As always, improved security involves some tradeoffs in practicality.



Networking/Security Forums -> Exploits // System Weaknesses


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group