Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a check to list all found browser profiles #428

Open
tigre-bleu opened this issue Jun 13, 2024 · 0 comments
Open

Add a check to list all found browser profiles #428

tigre-bleu opened this issue Jun 13, 2024 · 0 comments

Comments

@tigre-bleu
Copy link

Issue description

Not an issue but an enhancement. LinPEAS/WinPEAS could show a list of all browser profiles that were found on the host.

At the moment, on linux for instance there is a green line for directories in home folder showing that there is a .mozilla folder but that is not really appealing. Browser profiles may contain passwords and/or cookies that are interesting.

I see various implementations with different levels of complexity. For instance, for Firefox on Linux:

  • Option 1: Simply look for folder like /home/john/.mozilla/firefox/ and report the folder
  • Option 2: Look for the content of files like /home/john/.mozilla/firefox/profiles.ini to get the actual profile folder name then report the full path of the profile folder

One step even further would be to confirm that there are actual passwords stored in the logins.json file before reporting.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant