EvilZone
Programming and Scripting => Scripting Languages => : fox12345 September 30, 2013, 09:27:13 AM
-
I write python script to read "test.db" file and save data to txt file. it is working well. i am really happy about it. it is my first script. then i know how to read ".db" file and extract the data.
so now i want your help to decrypt the key3.db file. how to do it? please help me.
exactly i want decrypt to encrypted "key3.db" with python script.
The passwords stored in this sign-on file are encrypted using Triple-DES followed by BASE64 encoding mechanism
http://evilzone.org/scripting-languages/crack-firefox-passwords-with-python/ (http://evilzone.org/scripting-languages/crack-firefox-passwords-with-python/)
-
http://www.example-code.com/python/fileEncryption.asp
Search engines can do miracles you know.
3des + python gives x million results.
-
Yes I understands.
But I have a problem.
"Firefox stores password data in two files: key3.db (Master Password / Encryption key) and a "signons" file (encrypted names and passwords) "
So what is the (KEY = / IV = ) to decrypt the key3.db?where is it?
Google is good dear....But now i am really feeling tired*
-
The default key (master password) for key3.db is a blank string. That is if the user hasn't given any master password which is the case for most users.
So I would start with that.
I have published a paper with sample codes how to decrypt key3.db:
http://evilzone.org/tutorials/how-mozilla-saves-passwords/msg46577/#msg46577 (http://evilzone.org/tutorials/how-mozilla-saves-passwords/msg46577/#msg46577)
However, this is only the first step to get the login information.
Maybe this can help you further: http://www.infond.fr/2010/04/firefox-passwords-management-leaks.html (http://www.infond.fr/2010/04/firefox-passwords-management-leaks.html)
Other than that: Mozilla products are open source. You might as well just look into the source code.