Author Topic: anyone help me?  (Read 794 times)

0 Members and 1 Guest are viewing this topic.

Offline fox12345

  • Serf
  • *
  • Posts: 25
  • Cookies: -31
    • View Profile
anyone help me?
« on: September 30, 2013, 09:27:13 am »

I write python script to read "test.db" file and save data to txt file. it is working well. i am really happy about it. it is my first script. then i know how to read ".db" file and extract the data.




so now i want your help to decrypt the key3.db file. how to do it? please help me.
exactly i want decrypt to encrypted "key3.db" with python script.


The passwords stored in this sign-on file are encrypted using Triple-DES followed by BASE64 encoding mechanism
http://evilzone.org/scripting-languages/crack-firefox-passwords-with-python/

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: anyone help me?
« Reply #1 on: September 30, 2013, 09:32:49 am »
http://www.example-code.com/python/fileEncryption.asp

Search engines can do miracles you know.
3des + python gives x million results.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline fox12345

  • Serf
  • *
  • Posts: 25
  • Cookies: -31
    • View Profile
Re: anyone help me?
« Reply #2 on: September 30, 2013, 12:12:12 pm »
Yes I understands.
But I have a problem.
"Firefox stores password data in two files: key3.db (Master Password / Encryption key) and a "signons" file (encrypted names and passwords) "


So what is the  (KEY = / IV = ) to decrypt the key3.db?where is it?
Google is good dear....But now i am really feeling tired*


« Last Edit: September 30, 2013, 12:13:07 pm by fox12345 »

Offline Deque

  • P.I.N.N.
  • Global Moderator
  • Overlord
  • *
  • Posts: 1203
  • Cookies: 518
  • Programmer, Malware Analyst
    • View Profile
Re: anyone help me?
« Reply #3 on: September 30, 2013, 03:00:48 pm »
The default key (master password) for key3.db is a blank string. That is if the user hasn't given any master password which is the case for most users.
So I would start with that.

I have published a paper with sample codes how to decrypt key3.db:
http://evilzone.org/tutorials/how-mozilla-saves-passwords/msg46577/#msg46577

However, this is only the first step to get the login information.

Maybe this can help you further: http://www.infond.fr/2010/04/firefox-passwords-management-leaks.html

Other than that: Mozilla products are open source. You might as well just look into the source code.
« Last Edit: September 30, 2013, 03:04:46 pm by Deque »