Reading your mate passwords in Firefox

So, here is the quest. You need to discover the password of your best friend. Although this might seem morally reprehensible you are moved by nobel and deep reasons. You need to check in his email and discover if he is having an affair with your wife. You can’t just confront him if you are not sure. Nor can you run the risk of confronting your wife before you are sure.

We will assume that you have access to your best mate computer. After all he trusts you, right. And with reasons, you would never do anything against him… normally. But this time it’s different. If he has been seducing your angel, he deserves the worse.

We will also assume that your best friend is really into security, and since firefox is a more secure system, he uses firefox. Daily. And as a final assumption we shall assume that since he keeps his mail on the web, and accesses it through the browser. Let’s assume it’s on Yahoo.

This is what you need to do:

1. Get his computer, in a moment he is out for launch (with your lady, bastard!), and lock yourself for the work. You will need privacy for this. If you are confronted you can always say you were wanking at the thought of the next (war in Iran/fall of Bush: choose whatever is appropriate)
2. Open Firefox, if it is not already open, go to the mozilla homepage and downloadWeb Developer 1.0.2
3. Close the browser
4. Open the browser
5. Go to the mail service that your soon to be ex-friend uses (yahoo, gmail, gmx, …)
6. Write your friend username in the appropriate form
7. wait for the password to appear (resist the temptation to actually open the mail. You need the password to check for the mail in later time from your computer). The password will usually appear as a series of asterisks, like this:*******. We need to clear that out.
8. Go to the Tools Menu. Open the Web Developer submenu. Open the Forms sub sub menu
9. Click on Show Password. The password will now appear cleared. Copy it.
10. Since you are there get also his other extra passwords, you know Amazon, PayPal.
11. If the password to a page is not available as presaved in the form, there is no problem:
    • (a) try the previous passwords (many people reuse the same password),
    • (b) just declare that you have lost your password, get a new password mailed to your friend (you have access to his mail, after all), and then delete the mail.
12. Now you need to delete the traces: Go under Tools, Extensions, and uninstall the web developer 1.02 (this is great, btw, firefox use to keep all the extensions that have been used. Now when you uninstall them they are actually deleted)
13. Leave back the computer as your “friend” left it
14. Go get yourself something to eat before the launch break is over

A note, if you enjoyed this entry you are welcome to link it. But if you actually intend to use it, please forget this entry and do not put any link to me. For one time I’ll be fine with a bit less pubblicity

Note for american lawyers (sorry guys, some people need things to be actually explained to them): I don’t condone password stealing. Here I am actually exposing a vulnerability with the hope that it gets cleared.

No related posts.