This is a tutorial on getting form element values from mozilla firefox's history.
Mozilla stores values entered into forms in unencrypted format in a file called 'formhistory.sqlite under the profiles folder for example:
%AppData%\Mozilla\Firefox\Profiles\randomname.default
So you might wonder what good is that for a hacker?
The file stores values which include:passwords, credit card information, security question answers for sites, search history, etc. all in plain text format...meaning by simply accessing this file from your target computer you will have immediate access to vital information.
A keylogger is a great program but it can only log keys after being installed meaning if the information was typed in a form earlier but not again the keylogger won't acquire it.
Another great advantage of stealing this file is that your program only needs to be run once to get a lot of information for future hack attacks and therefore it is much less likely your hack attempt will ever be detected.
Here is how one such attack may proceed:
-Your target runs your executable file,
-code runs to shutdown firefox (needed to access profile files)
-formhistory.sqlite for each profile is uploaded to an ftp server owned by the hacker by the hacking exe
-exe file returns an error message that firefox was unexpectedly shutdown with a button labelled 'restart firefox'
-firefox is restarted without making the target suspicious(firefox has bugs and crashes periodically
-exe file removes itself and all subfiles from target computer or hides in a hidden directory to be executed again at a predetermined timeframe
-hacker accesses formhistory.sqlite at leisure from ftp site and browses the file in plain text or with a script for target information
This method may also be run with a keylogger if desired
Some requirements
-exe must be run
-target must be using firefox (up to current version:3), firefox is becoming much more common among more users
-target must not delete history often (dormant exe can change firefox's settings)
This tutorial does not include the exe that will do necessary functions but you can always write your own or wait a few months until I have the time to write one.
Another great use is accessing your own form history to recover your own information if you have forgotten your password
Mozilla stores values entered into forms in unencrypted format in a file called 'formhistory.sqlite under the profiles folder for example:
%AppData%\Mozilla\Firefox\Profiles\randomname.default
So you might wonder what good is that for a hacker?
The file stores values which include:passwords, credit card information, security question answers for sites, search history, etc. all in plain text format...meaning by simply accessing this file from your target computer you will have immediate access to vital information.
A keylogger is a great program but it can only log keys after being installed meaning if the information was typed in a form earlier but not again the keylogger won't acquire it.
Another great advantage of stealing this file is that your program only needs to be run once to get a lot of information for future hack attacks and therefore it is much less likely your hack attempt will ever be detected.
Here is how one such attack may proceed:
-Your target runs your executable file,
-code runs to shutdown firefox (needed to access profile files)
-formhistory.sqlite for each profile is uploaded to an ftp server owned by the hacker by the hacking exe
-exe file returns an error message that firefox was unexpectedly shutdown with a button labelled 'restart firefox'
-firefox is restarted without making the target suspicious(firefox has bugs and crashes periodically
-exe file removes itself and all subfiles from target computer or hides in a hidden directory to be executed again at a predetermined timeframe
-hacker accesses formhistory.sqlite at leisure from ftp site and browses the file in plain text or with a script for target information
This method may also be run with a keylogger if desired
Some requirements
-exe must be run
-target must be using firefox (up to current version:3), firefox is becoming much more common among more users
-target must not delete history often (dormant exe can change firefox's settings)
This tutorial does not include the exe that will do necessary functions but you can always write your own or wait a few months until I have the time to write one.
Another great use is accessing your own form history to recover your own information if you have forgotten your password