186 Comments
- FirstDigg, on 11/20/2007, -0/+270It works, very interesting. You can also do it the way firefox has built in:
Tools, Options, Security, show passwords, show passwords.
But that requires you to look through the whole list. This could be very useful. Thanks. =] - dblatti, on 11/20/2007, -1/+187I guess I should stop making my actual password all asterisks.
- mutt, on 11/20/2007, -15/+183Not to be a grammar Nazi, but you didn't "hack" anything. You cracked it.
Furthermore, you ran somebody else's code, so you are a script kiddie :) - troydoogle7, on 11/20/2007, -1/+44you can also use web developer toolbar under form information or show passwords
- tim507, on 11/20/2007, -0/+41Yea, i remember using a tool like this on windows 95. You drag a bullseye over the ******* and it shows you your password.
- jawbreaker4fs, on 11/20/2007, -2/+36You would be the worst sysadmin ever.
- nkassi, on 11/20/2007, -0/+27edit->prefenrences->security->show passwords
- ahughes, on 11/20/2007, -1/+28The simplicity of this javascript's ability to get the password kind of scares me.
- kenadak, on 11/20/2007, -0/+23Revelation
- richbradshaw, on 11/20/2007, -0/+19Actually, that would make it more secure, as this javascript would just return 6 asterisks, making the common person think it hadn't worked.
- LuxFX, on 11/20/2007, -0/+17I'm with troydoogle7 -- I use the WDT to show passwords if they're on the page.
But I also highly recommend KeePass, which will store your passwords under encryption. If you have to remember a lot of passwords, like I do, an app. like this is invaluable. - steelmaverick, on 11/20/2007, -2/+19Digg made me double post, digg me down I guess. Or up, if you're into that kind of thing.
- crazyfist, on 11/20/2007, -3/+19My favorite part is that someone else posted on their blog (http://www.raymond.cc/blog/archives/2007/07/13/eas ... and put it on Digg 130 days ago and then aksn1p3r blatantly plagiarized it, put it on his blog minus the details and screenshots, put it on Digg, and now he gets all the traffic from it. It's okay though because he put a link to the blog he stole it from at the bottom, totally fine.
- nesibus, on 11/20/2007, -0/+14I just happen to be on Win 95 with that very tool....
"Yea, i remember using a tool like this on windows 95. You drag a bullseye over the bigcock and it shows you your password."
You sick bastard. - BlaenkDenum, on 11/20/2007, -2/+16Besides, I don't see how this has anything to do with hacking/cracking/security. It's JavaScript, which is executed client side. Furthermore, the passwords are stored (The ones in asterisk that are revealed at least) in the Browser. But I'll let you enjoy your 'omg im 1337' moment.
Sadly, this was blog spam and the original author didn't get any praise (Nor diggs). - Tanouki, on 11/20/2007, -0/+13It really works, this is what I read: "You drag a bullseye over the hunter2 and it shows you your password."
- smackjer, on 11/20/2007, -1/+13Just set a master password. I'm not sure how secure that makes it, but it's better than nothing.
- NiGHTSChao, on 11/20/2007, -0/+12Does anyone know of a FF addon that will print out a copy of all your account names and passwords?
- IHaveIssues, on 11/20/2007, -1/+10Pointy-haired-boss calls the helpdesk:
PHB: "The system is asking me to create a password, but when I type, it changes the password into six asterisks!"
HD: "Well, just make six asterisks your password."
PHB (thinks): "How ever am I going to remember that?" - wicketr, on 11/20/2007, -1/+11They need to password protect that password list. It shouldn't be that easy to see the passwords. I guess I can't let any of my friends use my computer anymore if they want to check their mail unless I create a Guest account. Why make it so unsecure?
- timster, on 11/20/2007, -1/+10I remember that, too.
I used to make all my passwords 8 asterisks to confuse anyone using that tool. - aksn1p3r, on 11/20/2007, -2/+10Yea I did notice that redundancy but a quick copy paste is the easiest!
- voyvf, on 11/20/2007, -2/+10Better than pasting it in your URL bar - save it as a bookmarklet.
Other useful form tools here: https://www.squarefree.com/bookmarklets/forms.html - thailand1972, on 11/20/2007, -0/+8Wow....it's so easy to get passwords stored in the browser. How much fun can you have in an internet cafe??
- ShuttleDisaster, on 11/20/2007, -2/+10why would you bother commenting if you dont know the answer?
- DaSuHouSe, on 11/20/2007, -0/+7Way to repeat the comment you just replied to.
- Razster, on 11/20/2007, -0/+7The local cafe here in my home town uses FF, but they have a script which will erase as soon as the browser is closed - it's damn nice how they set it up too because it cleans cache as runs diskeeper once a week. Not to mention they have an anti-virus software called NOD32 which works like a charm.
But if you go to the local Library you can view passwords ;) - razishaban, on 11/20/2007, -0/+6Dugg for the bash.org reference
- Daniel15, on 11/20/2007, -2/+8"Firefox" Asterisk revealer? What is Firefox-specific about it?
It's just plain JavaScript and should work in most browsers. - airstrike, on 11/20/2007, -2/+8I've actually stolen quite a few passwords using this :(
- Phearce, on 11/20/2007, -0/+6I didn't know about this password list in Firefox. Does anybody know if IE has a similar password list?
- RyGiL, on 11/20/2007, -2/+8Cocaine's a hell of a drug
- sexybobo, on 11/20/2007, -0/+5tools>options>privacy then check always clear private data then make sure ask before clearing data in unchecked then click setting select passwords and apply changes.
Nice feature to have on a public pc or to hide your porn browsing habits. Just close Firefox and every thing is erased. - Kelmon, on 11/20/2007, -0/+5For those of you running a Mac, Keychain Access (/Applications/Utilities/Keychain Access) allows you to view passwords stored in your Keychain. Simply search for what you are looking for based on information like protocol, URL, username, etc., double-click the item you want to look at and click the "Show Password" checkbox (you'll be asked to provide your administrator's password so if you can't remember that then you're hosed). This works for pretty much all OS X application with a few notable exceptions like Firefox that continues to use its own damned password collection. I live in hopes that one day they'll sort this issue out...
- nastajus, on 11/20/2007, -0/+5No let's not.
- squirrelza, on 11/20/2007, -1/+6Or there's a plugin for FireFox: https://addons.mozilla.org/en-US/firefox/addon/462
You can specify what passwords should look like too, red, green, blue, etc! - sv650touring, on 11/20/2007, -0/+5you can import IE passwords into firefox and reveal them
- cyberoidx, on 11/20/2007, -0/+5here is a javascript coe to get the password in any web form : javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms;
for(j=0; j F.length; ++j) { f = F[j]; for (i=0; i
f.length; ++i) { if (f[i].type.toLowerCase() ==
"password") s += f[i].value + "n"; } } if (s) alert("Passwords in forms on this page:nn" + s); else alert("There are no passwords in forms on this page.");})(); - steelmaverick, on 11/20/2007, -3/+8Javascript is used to hide the pass I think, so its not hard to reveal it.
- quack, on 11/20/2007, -3/+7Probably Snadboy's Revelation - still available from www.snadboy.com.
- rossnyc, on 11/20/2007, -0/+4I don't need this...all my passwords are 8 asterisks. I never forget them.
- chikmag777, on 11/20/2007, -2/+6Who saves their passwords at internet cafes?
- wvdavis, on 11/20/2007, -0/+3You spell like a spammer!!!!
- HHP2K, on 11/20/2007, -0/+3Thank you Petraeus.
- gamma911, on 11/20/2007, -0/+3ja man
- bccThis, on 11/20/2007, -0/+3This works on IE too! So, I bet it works on all browsers..
- robdiggity, on 11/20/2007, -1/+4javascript:alert(document.form.password.value) or some such works for me. might have to view source to see what the form name and password element name are.
- bemenaker, on 11/20/2007, -0/+3For IE this would be useful. for FF it's a waste of time, it's already available to you.
- Bramus, on 11/20/2007, -1/+4Lame, as:
- that piece of javascript code has been around for ages by now (anyone using the webdeveloper toolbar? Yes it's the same method!)
- the piece of javascript code works in IE too, as in any other browser as it's a DOM manipulation
- ... - rarson, on 11/20/2007, -2/+5"I had 2 options, waste my time and phone Telkom or hack it .."
Congrats, you're a haxx0r. A better way to finish that sentence would have been "or find a work around."
I mean, "hacking" doesn't really involve searching the internet for someone else's javascript code. Especially when Firefox already provides for a way to show you the password. Had you actually been hacking, you probably would've came across that instead. -
Show 51 - 100 of 184 discussions



What is Digg?
The Digg Toolbar for Firefox lets you Digg, submit content, and keep track of Digg even when you're not on the Digg site. Download the official