firefox_decrypt

Decrypts the Firefox password store. The data lives in `logins.json` and the key that protects it in `key4.db`, inside the user profile; if no *master password* was set (and almost nobody sets one), copying the profile folder to the attacking machine and pointing the tool at it is enough. It returns the URL, username and cleartext password of every saved site, one of the most profitable harvests in post-exploitation.