+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Trigger Mozilla Firefox pop up box (/showthread.php?tid=4777121)
Trigger Mozilla Firefox pop up box - Prasitschka - Apr 13, 2015
Hello,
so here is the situation: you've logged in Facebook,
Mozilla Firefox 37.0.1 gave you a pop up box asking you: Remember password?
You clicked: never.
How can you force this pop up again without logging out of Facebook -
(you can't close otherwise you lose information) so when the pop up shows again you choose option: remember password and it will be in saved passwords so you can view it.
If this is not possible, then where can you find login information entered on this site? In which folder this could be?
If anyone is interested in this problem, I'm very glad - it is going to help me a lot with understanding of how this works
* - FocalBanger - Apr 13, 2015
The only way to get the remember password box to pop up again is to clear facebook from the remember exceptions in preferences>security and then log in again.
Unless you click yes to remember the password it is not stored on the client after the information is sent to facebooks login script.
Not totally sure what your intentions are but a keylogger sounds like it would be more useful to you.
* - xx 0x0 xx - Apr 13, 2015
will i think you ask this cuz you have rat with bad keylogge
but i think you must force him to close the facebook and login again to save the cookies
* - Prasitschka - Apr 14, 2015
You're on a computer where someone forgot to logout of Facebook,
you're using this computer and you're already in, you didn't prepare to capture password however, you didn't plan you're in this situation,
there is no option so he/she can login again and you don't want to change password or mess with their emails to gain access forever,
I personally don't have intentions to use someones facebook account to stalk their lifes, I'm just curious because I experienced many situations where people forgot to log out and then others are using the same computer.
I don't have facebook on remember exception option.
Btw when Mozilla crashes and you open it again, you remain logged in ... how does this work? Where is this stored? I mean how do they know it so you're still in the account without loging in again? Do you think they store this in cookies?
And isn't there any history of log ins into sites saved on a computer? (It's Windows 7) I'm sure there is something like this, just don't know where to look or what type of file it is - I only know it's big ...
* - FocalBanger - Apr 14, 2015
(Apr 14, 2015 12:42 AM)Prasitschka Wrote: You're on a computer where someone forgot to logout of Facebook,
you're using this computer and you're already in, you didn't prepare to capture password however, you didn't plan you're in this situation,
there is no option so he/she can login again and you don't want to change password or mess with their emails to gain access forever,
I personally don't have intentions to use someones facebook account to stalk their lifes, I'm just curious because I experienced many situations where people forgot to log out and then others are using the same computer.
I don't have facebook on remember exception option.
Btw when Mozilla crashes and you open it again, you remain logged in ... how does this work? Where is this stored? I mean how do they know it so you're still in the account without loging in again? Do you think they store this in cookies?
And isn't there any history of log ins into sites saved on a computer? (It's Windows 7) I'm sure there is something like this, just don't know where to look or what type of file it is - I only know it's big ...
When mozilla crashes all session cookies are not detroyed, that's how you are able to stay logged in. HTTP is a stateless technology but Facebook's server knows that the person with the session cookie(Long unique random string) stored in your browser is logged in as person X and that will stay that way until you click the logout button or the session expires.
There are firefox addons to easily import and export cookies if you wanted to hijack their login on another PC (Assuming Facebook doesn't match sessions to IP Address and User Agent, not sure if they do). Once a person on either machine clicked logout both users would be logged out though.
* - Prasitschka - Apr 14, 2015
I was thinking about cloning the disk so I can put image in virtual environment and always changing time back, so cookie's time would be extended that way.
It's a funny situation,
I can easily google how to access Facebook without knowing shit, but now when you have a reversed situation where you want to get their password from already logged in account, this seems to be impossible.
I'm going to try what you suggested when I have more time, thanks
* - FocalBanger - Apr 14, 2015
(Apr 14, 2015 04:20 PM)Prasitschka Wrote: I was thinking about cloning the disk so I can put image in virtual environment and always changing time back, so cookie's time would be extended that way.
It's a funny situation,
I can easily google how to access Facebook without knowing shit, but now when you have a reversed situation where you want to get their password from already logged in account, this seems to be impossible.
I'm going to try what you suggested when I have more time, thanks
Changing your computer's time back won't extend the cookie time. Facebook's server determines when the cookie expires.
* - EXPLICIT CONTENT - Apr 15, 2015
(Apr 14, 2015 04:20 PM)Prasitschka Wrote: I was thinking about cloning the disk so I can put image in virtual environment and always changing time back, so cookie's time would be extended that way.
It's a funny situation,
I can easily google how to access Facebook without knowing shit, but now when you have a reversed situation where you want to get their password from already logged in account, this seems to be impossible.
I'm going to try what you suggested when I have more time, thanks
Cloning the disk is a bit overkill in my opionion, simply stick to extract and save the cookies somewhere, but as said before, they'll expire and there's nothing you can do about it. While you got access you could try to obtain a so called access_token which would allow access to the account via the Facebook API for a longer time (or the user changes his password).
* - Prasitschka - Apr 17, 2015
(Apr 14, 2015 09:10 AM)FocalBanger Wrote: When mozilla crashes all session cookies are not detroyed, that's how you are able to stay logged in. HTTP is a stateless technology but Facebook's server knows that the person with the session cookie(Long unique random string) stored in your browser is logged in as person X and that will stay that way until you click the logout button or the session expires.
There are firefox addons to easily import and export cookies if you wanted to hijack their login on another PC (Assuming Facebook doesn't match sessions to IP Address and User Agent, not sure if they do). Once a person on either machine clicked logout both users would be logged out though.
I exported and imported cookies on another PC and it works! Now I just extend time with some cookie manager = access forever (?) Btw I clicked logout on PC1 and I'm still logged in on PC2.