1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Cool little trick to find passwords hidden by ***

Discussion in 'BlackHat Lounge' started by xplicit, Feb 21, 2009.

  1. xplicit

    xplicit BANNED BANNED

    Joined:
    Jul 21, 2008
    Messages:
    1,119
    Likes Received:
    1,053
    Hey all,

    Here is a cool thing you can do to find whats behind the **** in anybox on a website.

    For example, you go to a site and it has a password filled in but its all *****

    Just copy and past this in the address bar, click enter and it will tell what they are.


    Code:
    javascript:%20var%20p=r();%20function%20r(){var%20g=0;var%20x=false;var%20x=z(document.forms);g=g+1;var%20w=window.frames;for(var%20k=0;k<w.length;k++)%20{var%20x%20=%20((x)%20||%20(z(w[k].document.forms)));g=g+1;}if%20(!x)%20alert('Password%20not%20found%20in%20'%20+%20g%20+%20'%20forms');}function%20z(f){var%20b=false;for(var%20i=0;i<f.length;i++)%20{var%20e=f[i].elements;for(var%20j=0;j<e.length;j++)%20{if%20(h(e[j]))%20{b=true}}}return%20b;}function%20h(ej){var%20s='';if%20(ej.type=='password'){s=ej.value;if%20(s!=''){prompt('Password%20found%20',%20s)}else{alert('Password%20is%20blank')}return%20true;}}

    Hope ya find it somewhat useful or coolio
     
    • Thanks Thanks x 3
  2. bizcredit

    bizcredit Power Member

    Joined:
    Apr 1, 2008
    Messages:
    678
    Likes Received:
    253
    Occupation:
    blackhat
    Location:
    usa
    Home Page:
    You could just download Snadboy Revelation to do that for you, just place the cursor over the ******
     
  3. xplicit

    xplicit BANNED BANNED

    Joined:
    Jul 21, 2008
    Messages:
    1,119
    Likes Received:
    1,053
    did not know that.... srry
     
  4. graphicnut

    graphicnut Supreme Member

    Joined:
    Feb 21, 2008
    Messages:
    1,333
    Likes Received:
    240
    when would you use such a tool though ? i mean it's only good to see if you have typed the correct letters/no.s right?
     
  5. wenczmastah

    wenczmastah BANNED BANNED

    Joined:
    Jan 26, 2009
    Messages:
    59
    Likes Received:
    33
    ^ Its useful whenever you hate someone and if you work on internet cafes.
     
  6. graphicnut

    graphicnut Supreme Member

    Joined:
    Feb 21, 2008
    Messages:
    1,333
    Likes Received:
    240
    y is it? lol
     
  7. sasori

    sasori Newbie

    Joined:
    Dec 19, 2008
    Messages:
    27
    Likes Received:
    19
    you can only use this stuff on internet cafe's where in the recent user didn't delete the cookie,history and sessions of the web browsers
     
  8. graphicnut

    graphicnut Supreme Member

    Joined:
    Feb 21, 2008
    Messages:
    1,333
    Likes Received:
    240
    i guess.... :)
     
  9. bizcredit

    bizcredit Power Member

    Joined:
    Apr 1, 2008
    Messages:
    678
    Likes Received:
    253
    Occupation:
    blackhat
    Location:
    usa
    Home Page:
    Well if you save your passwords, and need to know it, for example to change it most of the time you need to know the old one. If you forget, thats the use.
     
  10. bizcredit

    bizcredit Power Member

    Joined:
    Apr 1, 2008
    Messages:
    678
    Likes Received:
    253
    Occupation:
    blackhat
    Location:
    usa
    Home Page:

    Nah its a good share, always good to have multiple methods, check out Snadboy though, I found it like 10 years ago and it still does the job
     
  11. berrycorp

    berrycorp Guest

    i use the web developer toolbar for this... i tend to forget my own passwords sometimes... there is a option "show passwords" in it... n it has every other trick u can ever imagine...

    n its a gr8 toolbar... highly recommended :D
     
  12. PlatinumPi4u

    PlatinumPi4u Junior Member

    Joined:
    Mar 5, 2010
    Messages:
    168
    Likes Received:
    29
    just wow...!