• 6,535
  • 91
  • +329
  • 217
Hacking Internet Users Password Using Malicious Firefox Plugin

Hacking Internet Users Password Using Malicious Firefox Plugin

Bookmark

Back again to the hacking tutorial after hectic time lately. Today we will discuss about Hacking Internet Users Password Using Malicious Firefox Plugin.

The title Hacking Internet Users Password Using Malicious Firefox Plugin is come after some users asking about the possiblity to gather username and password from browser plugin.

The answer is yes you can gather a username and password from internet users when they installed a malicious plugin.According to wikipedia a plugin is

In computing, a plug-in (or plugin, extension) is a software component that adds a specific feature to an existing software application. When an application supports plug-ins, it enables customization. The common examples are the plug-ins used in web browsers to add new features such as search-engines, virus scanners, or the ability to utilize a new file type such as a new video format.

in this Hacking Internet Users Password Using Malicious Firefox Plugin case, the attacker will change or add or modify or create the main function of a firefox plugin and override or rewrite some function to do some malicious activities with benefit for the attacker.

Requirements:

1. Firefox malicious plugin

2. Understand Javascript

3. Social Engineering

How to Hacking Internet Users Password Using Malicious Firefox Plugin:

1. If you still didn't get the scenario, we try to draw it in a picture below.

Hacking Internet Users Password Using Malicious Firefox Plugin

Victim browser which has a malicious Firefox plugin installed accessing the internet. As victim browse the internet, the infected browser will also send the data to the attacker server. The data is which website victim visited, and send the username and password as well.

2. This is the plugin looks like

Hacking Internet Users Password Using Malicious Firefox Plugin

3. This is the attacker harvester server code looks like

Hacking Internet Users Password Using Malicious Firefox Plugin

the attacker harvester website will grab all GET or POST method and store it in a simple TXT file, but it can change to other database server as well.

4. This is the video how a firefox plugin can steal your credentials.

Conclusion:

1. Make sure you download the plugin only from trusted source (e.g: http://addons.mozilla.org/).

2. We still prepare the plugin to download. Follow and like our Facebook page https://www.facebook.com/computer.hacking.tutorial for the news update.

Hope it's useful :-)

Share this article if you found this post was useful:

Blogger at hacking-tutorial.com. Love PHP, offensive security and web. Contact him at me[-at-]vishnuvalentino.com

See all posts by || Visit Website : http://www.vishnuvalentino.com

  • cobain

    may i know how this will work? i’m a bit confuse. does this means we should send a file to ensure ‘victim’ click and install that add-ons?

    • http://www.vishnuvalentino.com v4L

      #cobain

      In the video example is plain malicious addons. you can bundle the malicious addon with other function. e.g: facebook share function, pinterest share, etc.

  • cobain

    ouh ya i got it. thanks! :)

  • kusy

    Can you share to us Plugins source code.<<<<<Please!

    • http://www.vishnuvalentino.com v4L

      #kusy

      check the update on our facebook pages https://www.facebook.com/computer.hacking.tutorial

      • slg

        Isn’t any update on the FaceBook Page. I sent to you a private email, but you didn’t reply.

  • ahmed

    Hi , i don’t know where i can put the file where i can collect the username and password

    • Deepak

      do u have that plugin ..plz send me at deepakpanda93@gmail.com??