Windows - Mozilla Firefox
Last updated
Last updated
When trying to gather additional credentials from lets say an Administrator Jump Host, extracting sensitive Mozilla Firefox files is a great approach. Doing this manually is boring and time consuming, especially if there are hundreds of users under C:\Users.
To simplify this I've made a simple PowerShell script, firefox_dump.ps1, that gathers all sensitive Mozilla Firefox information which can later be decrypted using firefox_decrypt.py or similar.
The script should be ran as a high privileged user to gather as much information as possible.
If you don't want to upload files to the target host it's possible to simply copy-paste the try-catch code from the script and run it as is in PowerShell.
