### Install Project Dependencies Source: https://github.com/lclevy/firepwd/blob/master/readme.md Installs the required Python packages for the project using pip. Ensure you have a requirements.txt file. ```bash pip install -r requirements.txt ``` -------------------------------- ### Display Help Message Source: https://github.com/lclevy/firepwd/blob/master/readme.md Use the -h or --help option to display the script's usage instructions and available options. ```bash python firepwd.py -h ``` -------------------------------- ### Decrypt Passwords with Master Password Source: https://github.com/lclevy/firepwd/blob/master/readme.md Provide the master password using the -p option when decrypting passwords from a specified directory. The output shows the decrypted private key data and login/password pairs. ```bash python firepwd.py -p 'MISC*' -d mozilla_db/ ``` -------------------------------- ### Decrypt Passwords from Default Directory Source: https://github.com/lclevy/firepwd/blob/master/readme.md Run the script without specifying a directory to process key3.db/key4.db and signons.sqlite/logins.json files in the current directory. This command shows no stored passwords found. ```bash python firepwd.py -d /c/Users/lclevy/AppData/Roaming/Mozilla/Firefox/Profiles/o8syoe2h.default/ ``` -------------------------------- ### Decrypt Firefox Passwords (Default Profile) Source: https://github.com/lclevy/firepwd/blob/master/readme.md Decrypts passwords from the default Firefox profile directory. Requires the path to the profile. ```bash python firepwd.py -d /c/Users/laurent/AppData/Roaming/Mozilla/Firefox/Profiles/77l7qxfi.default/ SEQUENCE { SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.1.12.5.1.3 SEQUENCE { OCTETSTRING c6581e1fbdb50b4265ab11f54861fdbb62cb4abd INTEGER 01 } } OCTETSTRING cecb819cb612dccfc2265121aa38ed5d4b7cfc6f06f92f4fb48305f1afb3234f02e25fcb8f3029c0d4aa8c9be7ef292fc3c7d2d446e33f7f80d03a1df35aecb72f843463907786777da8bf1fd47a955fad9eb23e65e0ddff6d1ed0463cc69ed4 } decrypting privKeyData [...] ``` -------------------------------- ### Decrypt Firefox Passwords (Version 2, Specific Path) Source: https://github.com/lclevy/firepwd/blob/master/readme.md Decrypts passwords using version 2 of the encryption scheme, specifying a custom path and a password pattern. Displays global salt and password check results. ```bash python firepwd.py -v 2 -p MISC* -d ff50 globalSalt: b'5ed0adce15d896b84115f530be4e259f72beda91' SEQUENCE { SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.1.5.13 pkcs5 pbes2 SEQUENCE { SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.1.5.12 pkcs5 PBKDF2 SEQUENCE { OCTETSTRING b'f92dde91809b8b00c6607b73f3d0321c80f930aa13f13da5293aede76ee92048' INTEGER b'01' INTEGER b'20' SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.2.9 hmacWithSHA256 } } } SEQUENCE { OBJECTIDENTIFIER 2.16.840.1.101.3.4.1.42 aes256-CBC OCTETSTRING b'd7f6eef452a0becb5227af2e175c' } } } OCTETSTRING b'9ef5288ba19326df7188f1f0d1811c2a' } clearText b'70617373776f72642d636865636b0202' password check? True SEQUENCE { SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.1.5.13 pkcs5 pbes2 SEQUENCE { SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.1.5.12 pkcs5 PBKDF2 SEQUENCE { OCTETSTRING b'86535fdbbc242465d6e8477094b93221c9cc45bb363141e177ae2801e1972b32' INTEGER b'01' INTEGER b'20' SEQUENCE { OBJECTIDENTIFIER 1.2.840.113549.2.9 hmacWithSHA256 } } } SEQUENCE { OBJECTIDENTIFIER 2.16.840.1.101.3.4.1.42 aes256-CBC OCTETSTRING b'4de278f3bc4cf8e503ce0b8672ec' } } } OCTETSTRING b'62093ca8bb60c0416b5e7bee18402b99c21e780985ff75737fb8a493a858aaf2' } clearText b'7f914a642a4552b0e0c7a87061fe5d9437a41968c4a7d35e08080808080808' decrypting login/password pairs [...] ``` -------------------------------- ### Decrypt Thunderbird Passwords Source: https://github.com/lclevy/firepwd/blob/master/readme.md Decrypt passwords from a Thunderbird profile directory by specifying the path using the -d option. The output includes the decrypted private key data and login/password pairs. ```bash python firepwd.py -d /c/Users/laurent/AppData/Roaming/Thunderbird/Profiles/3luvewzm.default/ ``` === COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.