john-users - Re: decoding firefox passwords

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: 18 Jul 2009 09:23:00 +0200
From: "Helmut Hullen" <Hullen@...nline.de>
To: john-users@...ts.openwall.com
Subject: Re: decoding firefox passwords

Hallo, RB,

Du meintest am 17.07.09:

>> can I decode firefox passwords (from signons.txt and/or key3.db)
>> with "John the Ripper"?

> No, but adding the format doesn't seem terribly difficult.  Once you
> have brute-forced key3.db, it's game over.

>> If no: is there another program for this job?

> There are quite a few.  #4 result on a search for "key3.db" produces
> Firemaster.  No idea how quick or good it is.

Meanwhile I've found

        http://securityxploded.com/firepassword.php

"firemaster" is necessary for a master password (stored somewhere in  
"key3.db"; if there is no such master password then FirePassword (CLI)  
or FirePasswordViewer (Windows-GUI) do the job.

Thank you!

Viele Gruesse!
Helmut

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.