Things which are necessary for this hack to be successful:
1. Physical access to victim machine (if you don’t have, use RATs).
2. Victim’s passwords saved in victim’s Firefox.
Usually, whenever passwords are stored in Firefox, they can be easily seen by going to Tools -> Options ->Security and hitting on Saved Passwords.
But, if the victim if shrewd enough to use Master Password, on hitting Saved Passwords, you are prompted to enter Master Password. Master Password thus protects victim’s password from being seen by any stranger and you are unable to hack his Email passwords which are stored in Firefox browser.
This article shows you how to bypass Master Password of victim Firefox. So, follow the steps below to hack his Email account password, even if Master Password is in role.
Let us assume that victim uses Vista Operating system and you (hacker) are using Windows XP.
1. On victim computer, go to:
For Windows Vista:
C:\Users\RAJ\AppData\Roaming\Mozilla\Firefox\Profiles\iosjcyzp.default
For Windows XP:
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\tez96yyu.default
Replace RAJ and Administrator with your victim’s computer username.
and copy “signons.sqlite” file to your pen drive or any removable drive.
2. Now, come back to your computer and paste this “signons.sqlite” in your Firefox by using the path in Step 1.
4. Go to Tools -> Options -> Security tab. Hit on “Show password” and this time, you will be able to see victim mail accounts in popup box. Hit on “Show password” again and you will be able to see his hacked email account passwords. Now, you don’t have to enter any Master password.
1. Signons.sqlite and
2. Key3
Signons.sqlite is used to store all online username and passwords in encrypted form while Key3 file stores information about Master Password. So, in this hack, we are stealing victim’s Signons.sqlite file (and not Key3) and opening it in our Firefox. Naturally, our Firefox shows victim’s password and thus, we are able to hack email account passwords.
Really, this is one of the most vulnerable aspects of Firefox. In fact, Firefox stealers use this same logic for stealing Firefox saved passwords and thus to hack email accounts of victim. I have tried my best to keep this tutorial simple.
No comments:
Post a Comment