Skip to content

Add a check to list all found browser profiles #428

@tigre-bleu

Description

@tigre-bleu

Issue description

Not an issue but an enhancement. LinPEAS/WinPEAS could show a list of all browser profiles that were found on the host.

At the moment, on linux for instance there is a green line for directories in home folder showing that there is a .mozilla folder but that is not really appealing. Browser profiles may contain passwords and/or cookies that are interesting.

I see various implementations with different levels of complexity. For instance, for Firefox on Linux:

  • Option 1: Simply look for folder like /home/john/.mozilla/firefox/ and report the folder
  • Option 2: Look for the content of files like /home/john/.mozilla/firefox/profiles.ini to get the actual profile folder name then report the full path of the profile folder

One step even further would be to confirm that there are actual passwords stored in the logins.json file before reporting.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions