Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 03 Apr 2012 23:51:11 +0100
From: a <>
Subject: Re: Cracking Thunderbirds password database.


Thank you all for your help. All the information provided has been very
useful. I will provide details of how I went about recovering
information from Thunderbird which is also applicable to Firefox and
probably their derivatives too.

Thunderbird and Firefox each store password details in two files:

key3.db and signons.sqlite

located in:

~/.mozilla/firefox/$profile$.default and ~/.thunderbird/$profile$.default

A master password can be set in either program and this affects key3.db.
If there is a master password on key3.db, FireMasterLinux will find it:

however it depends on the Gecko SDK:

If required, specify the password and use Mozilla Password Dump:

which will then display the usernames and passwords.

The information stored in signons.sqlite can be extracted by using
SQLite3. One such method is detailed here:

the information is encrypted and John the Ripper is unable to parse the

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.