You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Not an issue but an enhancement. LinPEAS/WinPEAS could show a list of all browser profiles that were found on the host.
At the moment, on linux for instance there is a green line for directories in home folder showing that there is a .mozilla folder but that is not really appealing. Browser profiles may contain passwords and/or cookies that are interesting.
I see various implementations with different levels of complexity. For instance, for Firefox on Linux:
Option 1: Simply look for folder like /home/john/.mozilla/firefox/ and report the folder
Option 2: Look for the content of files like /home/john/.mozilla/firefox/profiles.ini to get the actual profile folder name then report the full path of the profile folder
One step even further would be to confirm that there are actual passwords stored in the logins.json file before reporting.
The text was updated successfully, but these errors were encountered:
Issue description
Not an issue but an enhancement. LinPEAS/WinPEAS could show a list of all browser profiles that were found on the host.
At the moment, on linux for instance there is a green line for directories in home folder showing that there is a
.mozilla
folder but that is not really appealing. Browser profiles may contain passwords and/or cookies that are interesting.I see various implementations with different levels of complexity. For instance, for Firefox on Linux:
/home/john/.mozilla/firefox/
and report the folder/home/john/.mozilla/firefox/profiles.ini
to get the actual profile folder name then report the full path of the profile folderOne step even further would be to confirm that there are actual passwords stored in the
logins.json
file before reporting.The text was updated successfully, but these errors were encountered: