A trojan recently analysed by Webroot is said to rely on retrieving web page passwords from a browser’s password storage, rather than logging a user’s keyboard inputs. To make sure it will find all the interesting passwords in Firefox, the malware, called PWS-Nslog, makes some changes to jog the browser’s memory. A few manipulations in [...]

read full post »

Tool name : FFLogDump 0.1   Description : FFLogDump is a tool to access the Firefox 3.* main logfile and extract details about sites the user visited. In this version cookie information, favorites/bookmarks and the browsing history are extracted.   Tested on : Windows XP, Firefox 3.5.1   Feedback : In case you encounter any [...]

read full post »

Russian security firm Intevydis has made a Windows exploit for a previously unknown security hole in Firefox 3.6 available to its customers. The exploit allows attackers to remotely gain control of a PC. Intevydis develops the commercial VulnDisco add-on for the also commercial Canvas exploit toolkit by vendor Immunity. On the Immunity forum, developer Evgeny [...]

read full post »

Underscoring a little-known web vulnerability, hackers are exploiting a weakness in the Mozilla Firefox browser to wreak havoc on Freenode and other networks that cater to users of internet relay chat. Using a piece of javascript embedded into a web link, the hackers force users of the open-source browser to join IRC networks and flood [...]

read full post »

As I already announced in the morning an updated version of the FFPasswordRecovery tool is available tonight. So here it is. I reorganised the code a little and added the SQLite support that was integrated into FireFox lately. You can download both the binary version if you don’t want to compile it yourself or the [...]

read full post »