Browser Hacking

HACKING FIREFOX
  • The about:config page contains most (if not, all) of Firefox configuration options. It is so far the most effective, and the most powerful way to tweak and enhance your Firefox performance.
  • The closest analogy to how Firefox manages its internal settings is the Windows Registry. Each setting, or preference, is given a name and stored as a string (text), integer (number) or Boolean (true/false) value. 
  • However, Firefox doesn't keep its settings in the registry, but in a file called prefs.js. You can edit prefs.js directly, but it's often easier to change the settings through the browser window.
  • There are entries (one per line) that handle various types of configurations. Each entry has a searchable keyword. The entries can be of Boolean, integer, or string value. Entries contain Name, Status, Type, and Value. 
The basic layout of the about:config screen is a list with the following four columns :-
  • Preference Name : This column is the actual preference name used by Firefox.
  • Status : The Status is one of two different values: default or user set. This is what you use to determine whether a preference has its original or modified values.
  • Type : This column lists the type of preference, Boolean, integer, or string. These help Firefox understand how to use the preference.  
  • Value : The value for the preference correlates to the preference name and type.

ACCESSING YOUR "ABOUT:CONFIG" PAGE

  • In the firefox, type "about:config" in address bar.


  • You will be shown a warning page. Click the “I’ll be careful, I promise!” button to proceed.


  • Before Making any Firefox Hack or Back-up, Please Close your Firefox Browser to see changes.


HOW TO BACK-UP FIREFOX 
  • In Windows XP, go to profile folder --> C:\DocumentsandSettings\<username>\ApplicationData\Mozilla\Firefox\Profiles\<profile ID>.default\
  • In Windows Vista/ Windows 7, go to folder -->
C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\<profile ID>.default\
  • and in Linux it's --> ~/.mozilla/firefox/<profile ID>.default/
  • NOTE THAT APPLICATION DATA & APP DATA ARE HIDDEN FOLDERS BY DEFAULT IN WINDOWS. 
NOW THERE SEARCH FOR FILE NAMED AS --> "PREFS.JS". COPY IT & SAVE IT SOMEWHERE IN YOUR HARD-DISK. IF ANYTHING GOES WRONG, JUST COPY THAT PREVIOUS "PREFS.JS" FILE TO NEW FILE UNDER SAME LOCATION.
IF THIS DOESN'T WORKS, JUST ISSUE THE COMMAND "FIREFOX -SAFE-MODE" TO BRING UP THE FIREFOX SAFE MODE SCREEN. THEN, JUST SELECT RESET ALL USER PREFERENCES TO FIREFOX DEFAULTS. 
YOU CAN USE THE HANDY FIREFOX EXTENSION BACKUP EXTENSION (FEBE). IT BACKS UP NOT ONLY THE PREFS.JS FILE BUT JUST ABOUT EVERY OTHER THING IN FIREFOX -- EXTENSIONS, THEMES, COOKIES, FORM HISTORY AND SO ON.


IT'S ALL ABOUT PREFS.JS

    This is the file containing all your settings and preferences.

    • The prefs.js file, located in the profile folder, is used by Firefox, Thunderbird, Mozilla Suite, SeaMonkey and other Mozilla-based applications to store settings. 
    • For instance, when you create a new e-mail account in Thunderbird, the account name and server settings will be stored in the prefs.js file in your Thunderbird profile folder. Likewise, if you use the application's user interface (dialog boxes) to change settings from their default values, these will be written to prefs.js. 
    • Some extensions also store their settings in prefs.js. The prefs.js file does not actually contain all of the settings. It only stores changes made to the defaults, after they are written back to disk.
    YOUR "ABOUT:CONFIG" OPTION IS NOTHING, BUT A GRAPHICAL INTERFACE OF "PREFS.JS" FILE. THIS MAKES USERS TO UNDERSTAND FIREFOX EASILY.

    AMAZING FIREFOX - YOU SHOULD KNOW THAT TO HACK

    • Firefox stores all the remembered passwords in two files:
      1. Signons.sqlite and
      2. Key3
    • Signons.sqlite is used to store all online username and passwords in encrypted form.
    • Key3 file stores information about Master Password.  
    • Firefox Version 3.5 & later, uses the file "SIGNONS.TXT", While Firefox versions after 3.5 uses the file "SIGNONS.SQLITE".
    • MASTER PASSWORD is a special firefox feature, that will protect your saved online passwords from hackers.
    • The passwords stored in this sign-on file are encrypted using Triple-DES followed by BASE64 encoding mechanism.
    • Locations of both of these files are -->
    [Windows XP] 
    C:\DocumentsandSettings\<user_name>\ApplicationData\Mozilla\Firefox\Profiles\<random_name>.default

    [Windows Vista & Windows 7]
    C:\Users\<user_name>\AppData\Roaming\Mozilla\Firefox\Profiles\<random_name>.default



    USE MASTER PASSWORD - YOUR INITIAL SECURITY STEP
    • Open Firefox, Goto "Tools --> Options --> Security". See the "Saved Passwords" tab.
    • If you have Saved Passwords, any one having physical access to your PC or Laptop can use this feature to see your saved passwords and can get access to your account.
    • In short, this "Saved Passwords" feature is a godsend gift for hackers to hack your account. To get rid of this use Master Password. 
    • Goto, 
    Tools --> Options --> Security --> Use a Master Password. 


    Set a Strong Master password. For Strong Master Password, use Alphabets {a-z}, Numbers {0-9}, Special characters {!,@,#,$...} and Use Password in Sentences.

    • MASTER PASSWORD WILL APPLICABLE ONLY IF THERE IS ANY SAVED PASSWORD. IF THERE ISN'T ANY SAVED PASSWORD, YOU CANNOT USE MASTER PASSWORD.
    RESTORE FORGOTTEN MASTER PASSWORD
    • What Happen if you forgot your Master Password. You can't be able to see your saved passwords. Here we will see 2 ways through which we can Restore or crack Master Password.
    1. Restore Master Password
    • REMEMBER DOING THIS WILL RESTORE YOUR MASTER PASSWORD, BUT ALL YOUR SAVED PASSWORDS WILL BE LOST.
    Copy the Below code in your browser Address bar -->

    "chrome://pippki/content/resetpassword.xul" 


    Here goto Reset Button & Reset your Master Password Settings.


    2. Crack Your Master Password
    • In this Hack, it will try to break the Master Password. Your Saved Password will not be lost in this hack. The success of this hack depends upon the Strength of your Master Password.
    You can instantly recover all these sign-on passwords using tools such as FirePassword (command line) or FirePasswordViewer (GUI).
    In case you have lost your master password, then you can recover it using FireMaster tool.

    Follow the Link to Perform this hack -->

    • WHAT HAPPEN IF THERE IS MASTER PASSWORD, YOU CAN'T BE ABLE TO SEE THE SAVED PASSWORDS. IN THIS HACK YOU WILL LEARN HOW TO HACK EMAIL ID's, BY HACKING MASTER PASSWORD.

    1. On victim computer, go to :-

    For Windows Vista or Windows 7:

    C:\Users\<ADMIN-NAME>\AppData\Roaming\Mozilla\Firefox\Profiles\<anything>.default

    For Windows XP:

    C:\Documents and Settings\<Admin-name>\Application Data\Mozilla\Firefox\Profiles\<anything>.default

    2. Here Find the file "signons.sqlite", copy “signons.sqlite” file to your pen drive or any removable drive. If you are unable to find “signons.sqlite”, simply go to C drive and search for “signons.sqlite”.


    3. Now, come back to your computer and paste this “signons.sqlite” in your Firefox folder. Same ".default" folder as discussed earlier.

    4.  After you’ve pasted “signons.sqlite” file in your firefox, open Firefox browser. Go to Tools -> Options -> Security tab. Hit on “Show password” and this time, you will be able to see victim mail accounts in popup box. Hit on “Show password” again and you will be able to see his hacked email account passwords. 


    REMEMBER, BEFORE COPYING THAT "SIGNONS.SQLITE" FILE. FIRST COPY YOUR "SIGNONS.SQLITE" FILE IN SOME OTHER SAFE FOLDER. THEN ONLY PASTE THAT SIGNONS FILE INTO FIREFOX FOLDER.

    THIS HACK WILL NOT ALWAYS SUCCESSFUL, A FIREFOX HAVING PROFILE "SIGNONS.SQLITE" FILE WILL SOMETIMES FAIL THIS HACK.



    HACK SAVED PASSWORDS BEHIND ASTERICKS - SIMPLE VENOMOUS BROWSER HACKING

    When you type a password in the password form while logging into any of your account the letters of the password are hidden behind asterisk, so that nobody can have a sneak peak at your password. 

    Here you will learn a great hack to reveal the passwords behind asterisks & hack email account.
    • Open your browser. Go to the Web page containing the login in form where you saved your password.

    • Copy and paste the following piece of code to your browser address bar -->


    javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "n"; } } if (s) alert("Passwords in forms on this page:" + s); else alert("There are no passwords in forms on this page.");})();

    • Press ENTER, Browser will then display a Window that will show the Password behind Astericks. NOTE - THE DISPLAYED PASSWORD CONTAINS LAST WORD "n", IGNORE THE LAST "n".

    PASSWORD PROTECT YOUR WHOLE MOZILLA 
    • THIS HACK WE WILL LEARN HOW TO PASSWORD PROTECT WHOLE MOZILLA. THAT IS, WHENEVER YOU OR ANYONE OPEN's MOZILLA, HE MAY HAVE TO ENTER PASSWORD TO ACCESS YOUR MOZILLA BROWSER.
    • REMEMBER, CLOSE ALL YOUR MOZILLA BROWSER TO PERFORM THIS SECURITY FEATURE.
    • First, Goto RUN & Type --> "firefox -profilemanager".
    • A Small window will Open up. Here you can see a default profile already. Goto --> Create Profile, a "Create Profile Wizard" will come.

    • Click Next, Next screen you will see "Enter New Profile Name". Now Look Below, To better keep secure your new profile folder, You can give some other path to it or you can even create a new folder somewhere other in hard-disk.
    • Click Finish. Now you can see your new Firefox Profile is created. Now you have to install a add-on known as "ProfilePassword". Follow The Link to install this add-on -->
    • Here Download that version of Firefox... Save it or you may also Open it with Firefox Default. Click on Install. After You Install it, Firefox will ask for Re-start, Re-start it.
    • After Re-start, Goto "Tools --> Add-ons --> Extensions --> ProfilePassword-Firefox". Click on it. Enable it, if it's not Enable. 
    Goto in it's Option --> Set/Change Password.
    • Here Enter Your Desired Password. Ok, Now Re-start Firefox. Next Time you Open Your Firefox, it will ask for your Password to Access Mozilla Browser.












    Subscribe to: Posts (Atom)