Comments on: FireMaster with Pattern based Password Recovery Technique http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/ http://SecurityXploded.com Tue, 07 Feb 2012 03:08:45 +0000 hourly 1 http://wordpress.org/?v=3.1.2 By: Nagareshwar Talekar http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-54029 Nagareshwar Talekar Wed, 18 Jan 2012 11:16:03 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-54029 use the single quote -c '1234567890!”§$%&/()=?' use the single quote -c ’1234567890!”§$%&/()=?’

]]> By: Unix http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-54022 Unix Wed, 18 Jan 2012 10:06:36 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-54022 Nice but how to use the -c option with special chars also the " cause it is in the code detected as closed tag so if itry ing -c "1234567890!"§$%&/()=?" the last things are not recognized cuase ther is after the ! one " end alll after §$%&/()=? are not used but i need the f***ing " can any one help??? Nice but how to use the -c option with special chars also the ” cause it is in the code detected as closed tag so if itry ing -c “1234567890!”§$%&/()=?”

the last things are not recognized cuase ther is after the ! one ” end alll after §$%&/()=?
are not used but i need the f***ing ”

can any one help???

]]> By: Nagareshwar Talekar http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-32234 Nagareshwar Talekar Thu, 30 Jun 2011 08:09:01 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-32234 Yes, Firemaster already support pattern based password recovery, look here for more http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/ Yes, Firemaster already support pattern based password recovery, look here for more
http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/

]]> By: smf15 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-32232 smf15 Thu, 30 Jun 2011 08:01:47 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-32232 awesome thing but is it possible to disable upper-/lowercase in the pattern? and ist there a *-pattern. so if i only remember the beginning and the end of the password and don't know which and how much characters where in the middle i can type -c "pas*rd" (if the password is "password")? smf15 awesome thing
but is it possible to disable upper-/lowercase in the pattern?
and ist there a *-pattern. so if i only remember the beginning and the end of the password and don’t know which and how much characters where in the middle i can type -c “pas*rd” (if the password is “password”)?

smf15

]]> By: Nagareshwar Talekar http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-25687 Nagareshwar Talekar Tue, 01 Mar 2011 07:00:19 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-25687 We will have it soon. Mostly in GUI version which will be quicker and easier to use ! We will have it soon. Mostly in GUI version which will be quicker and easier to use !

]]> By: Jason Robinson http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-25681 Jason Robinson Tue, 01 Mar 2011 00:32:03 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-25681 Why isn't there an option to use the default ascii character set? I want to test my firefox master password and I want FireMaster to just use every toll possible, in order of greatest probability or fastest implementation. Common passwords first, Dictionary attack second, dictionary + numbers characters, common substitutions (l33t sp33k), then brute force. Is this possible? Is even a complete character set possible, or do you actually have to provide every ascii character in the -c option? Why isn’t there an option to use the default ascii character set? I want to test my firefox master password and I want FireMaster to just use every toll possible, in order of greatest probability or fastest implementation. Common passwords first, Dictionary attack second, dictionary + numbers characters, common substitutions (l33t sp33k), then brute force.

Is this possible? Is even a complete character set possible, or do you actually have to provide every ascii character in the -c option?

]]> By: Security Blog by Nagareshwar » Blog Archive » FireMaster Video Tutorial Showing Hybrid & Bruteforce Method http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-21343 Security Blog by Nagareshwar » Blog Archive » FireMaster Video Tutorial Showing Hybrid & Bruteforce Method Fri, 17 Sep 2010 07:53:09 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-21343 [...] Brute force to recover the master password from the Firefox key database file. Now it also supports “patten based password recovery mechanism” which significantly reduces the time taken to recover the [...] [...] Brute force to recover the master password from the Firefox key database file. Now it also supports “patten based password recovery mechanism” which significantly reduces the time taken to recover the [...]

]]> By: Nagareshwar Talekar http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-19508 Nagareshwar Talekar Wed, 06 Jan 2010 10:56:42 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-19508 Just now I have tried with Firefox latest version 3.5.7 and FireMaster 3.5 and it is working great...! I guess you have set the wrong password, may be you have set it like passw0rd (number 0 instead of letter o) and you are trying to get it right for "password" (note the letter o instead of number 0). use the -c option to override the default character set (abcdefghijklmnopqrstuvwxyz*@#!$123) which does not include number 0 . Good luck Just now I have tried with Firefox latest version 3.5.7 and FireMaster 3.5 and it is working great…!

I guess you have set the wrong password, may be you have set it like passw0rd (number 0 instead of letter o) and you are trying to get it right for “password” (note the letter o instead of number 0).

use the -c option to override the default character set (abcdefghijklmnopqrstuvwxyz*@#!$123) which does not include number 0 .

Good luck

]]> By: andy http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-19452 andy Thu, 31 Dec 2009 03:45:26 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-19452 um, it didn't work for me. I set my master password as "password" and tried brute force w/ either character set or pattern matching switches & neither worked on firefox version 3.5.6 on Windows 7 64 bit: C:\FireMaster_bin>firemaster -b -p "passwo?d" -l 8 "C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\asdfasdf.default" Firef0x Master Password Recovery Version 3.5 by Nagareshwar Y Talekar For latest version visit http://www.SecurityXploded.com. Performing Firefox Master Password Recovery operation ...... Firefox profile path : [C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\asdfadsf.default] Password Recovery Method : Bruteforce Maximum Password Length : 8 Minimum Password Length : 8 Bruteforce Character Set : [abcdefghijklmnopqrstuvwxyz*@#!$123] Password Pattern : [passwo?d] Press any key to start the Master Password recovery operation.. Performing bruteforce crack ... Total password count = 34 Total Bruteforce Time = 00d 00h 00m 01s (Assuming 100000 cracks per second) Press any key to continue the BruteCr@cK... 1 = Attempting passwoad 2 = Attempting passwobd 3 = Attempting passwocd 4 = Attempting passwodd 5 = Attempting passwoed 6 = Attempting passwofd 7 = Attempting passwogd 8 = Attempting passwohd 9 = Attempting passwoid 10 = Attempting passwojd 11 = Attempting passwokd 12 = Attempting passwold 13 = Attempting passwomd 14 = Attempting passwond 15 = Attempting passwood 16 = Attempting passwopd 17 = Attempting passwoqd 18 = Attempting password 19 = Attempting passwosd 20 = Attempting passwotd 21 = Attempting passwoud 22 = Attempting passwovd 23 = Attempting passwowd 24 = Attempting passwoxd 25 = Attempting passwoyd 26 = Attempting passwozd 27 = Attempting passwo*d 28 = Attempting passwo@d 29 = Attempting passwo#d 30 = Attempting passwo!d 31 = Attempting passwo$d 32 = Attempting passwo1d 33 = Attempting passwo2d 34 = Attempting passwo3d Password not found :( , try better options um, it didn’t work for me. I set my master password as “password” and tried brute force w/ either character set or pattern matching switches & neither worked on firefox version 3.5.6 on Windows 7 64 bit:

C:\FireMaster_bin>firemaster -b -p “passwo?d” -l 8 “C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\asdfasdf.default”

Firef0x Master Password Recovery Version 3.5
by Nagareshwar Y Talekar
For latest version visit http://www.SecurityXploded.com.
Performing Firefox Master Password Recovery operation ……

Firefox profile path : [C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\asdfadsf.default]

Password Recovery Method : Bruteforce
Maximum Password Length : 8
Minimum Password Length : 8
Bruteforce Character Set : [abcdefghijklmnopqrstuvwxyz*@#!$123]
Password Pattern : [passwo?d]

Press any key to start the Master Password recovery operation..
Performing bruteforce crack …
Total password count = 34
Total Bruteforce Time = 00d 00h 00m 01s (Assuming 100000 cracks per second)

Press any key to continue the BruteCr@cK…

1 = Attempting passwoad
2 = Attempting passwobd
3 = Attempting passwocd
4 = Attempting passwodd
5 = Attempting passwoed
6 = Attempting passwofd
7 = Attempting passwogd
8 = Attempting passwohd
9 = Attempting passwoid
10 = Attempting passwojd
11 = Attempting passwokd
12 = Attempting passwold
13 = Attempting passwomd
14 = Attempting passwond
15 = Attempting passwood
16 = Attempting passwopd
17 = Attempting passwoqd
18 = Attempting password
19 = Attempting passwosd
20 = Attempting passwotd
21 = Attempting passwoud
22 = Attempting passwovd
23 = Attempting passwowd
24 = Attempting passwoxd
25 = Attempting passwoyd
26 = Attempting passwozd
27 = Attempting passwo*d
28 = Attempting passwo@d
29 = Attempting passwo#d
30 = Attempting passwo!d
31 = Attempting passwo$d
32 = Attempting passwo1d
33 = Attempting passwo2d
34 = Attempting passwo3d
Password not found :( , try better options

]]> By: physickers http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/comment-page-1/#comment-10409 physickers Thu, 11 Dec 2008 13:13:52 +0000 http://nagareshwar.securityxploded.com/2008/03/31/firemaster-with-pattern-based-password-recovery/#comment-10409 hi,,nagareshwar.. i have recieve your email and i want thanks for you before. in my firefox,C:\Documents and Settings\\Application Data\(in here i dont see any file)... by theway,,i read from magazine about fire password will delete by microsoft,didnt he??. ----- physickers--- indonesia peace be with you hi,,nagareshwar..
i have recieve your email and i want thanks for you before.
in my firefox,C:\Documents and Settings\\Application
Data\(in here i dont see any file)…
by theway,,i read from magazine about fire password will delete by microsoft,didnt he??.
—– physickers—
indonesia
peace be with you

]]>