Hacking Firefox's Saved Passwords

  First of all i am not responsible for whatever you do to the PC you are experimenting on, whether you fuck it up.... For me its just for educational purpose!!!

Anyways if you have read my earlier tutorial than you might be knowing how to remove Master Password from Mozilla Firefox Browser. Its quiet easy to look for the password of a particular website and remember it for a few minutes but what if there are multiple usernames and passwords saved by that firefox user and you want to hack them all? Than here comes the need to steal the file that contains all passwords!!!

"If there is a file that saves the Master Password, than there must be some file that contains the saved passwords as well." It is quiet obvious but many of you havn't thought this before. For those who encountered this question in their minds, i want to say something. "Guys, thats a hacking thought! No looking back now."

So this tutorial is written on the fact that all the passwords stored in Firefox should be located somewhere in our computer in some file. It is quiet obvious that the passwords are not saved in "as is" form. Obviously, they are either encrypted or in some ununderstandable form. After a lot of Googling and testing i came on the conclusion that the passwords are saved in the file "signons.sqlite".

In Windows 7, this file is located at :-
D:\Users\<your user account>\AppData\Roaming\Mozilla\Firefox\Profiles\<your profile name>.default
In Windows Xp,
C:\Documents and Settings\<your user account>\Application Data\Mozilla\Firefox\Profiles\<your profile name>.default
NOTE : THE TWO TAGS <your user account> and < your profile name> are different for different users. Change Accordingly......

Now if this file is unreadable than how to look for the passwords? The solution to this is with you, the Firefox itself will reveal all secrets... Muhahaahaaa.

See, you just have to copy this file and replace your own file with this one. Now when you will open your Firefox browser and will look for the passwords than..............surprise surprise!!!

One thing i would like to share here is, we need not worry about Master Password as we are directly dealing with the file that contains the saved passwords. 

{K@R@N}