Unhide passwords using Javascript 10 posts

OP Wed May 15, 2013 4:46 am
User avatar
  • Gender: Male
  • Posts: 1470
  • Joined: Dec, 2009
  • Karma: 30
Have u ever wondered to see the password the ******* ?

Here it is, just go to the site where you want to view the ***** passwords and paste this in the url and press enter.

Code
javascript:(function(){var%20s,F,j,f,i;%20s%20=%20%22%22;
%20F%20=%20document.forms;%20for(j=0;%20j<F.length;%20++j)
%20{%20f%20=%20F[j];%20for%20(i=0;%20i<f.length;%20++i)
%20{%20if%20(f[i].type.toLowerCase()%20==%20%22password%22)
%20s%20+=%20f[i].value%20+%20%22\n%22;%20}%20}%20if
%20(s)%20alert(%22Umair%20Kazmi:%20The%20Password%20On
%20This Page:\n\n%22%20+%20s);%20else%20alert(%22There%20are
%20no%20passwords%20in%20forms%20on%20this
%20page.%22);})();
Mon Nov 11, 2013 6:46 am
User avatar
  • Gender: Female
  • Posts: 50
  • Joined: Apr, 2012
  • Karma: 0
Can any one else tell me if this really works?
Mon Nov 11, 2013 6:49 am
User avatar
Mafia Don
Legendary Family Member
  • Gender: Male
  • Posts: 12814
  • Joined: Nov, 2007
  • Advertisements: 406
  • Karma: 204
hidrocalida wrote:
Can any one else tell me if this really works?


Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.
Mon Nov 11, 2013 7:01 am
User avatar
Administrator
Legendary Family Member
  • Gender: Male
  • Posts: 6284
  • Joined: Jun, 2010
  • Advertisements: 45
  • Karma: 368
Don Von Free Credits wrote:
hidrocalida wrote:
Can any one else tell me if this really works?


Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.


This only works if the password is stored in the web browser? Cause if so, you could get a hole of people's profiles if they are using FireFox and install them on a new machine to look through. Not sure how other browsers work so idk if they store all your settings/addons in a profile.
Mon Nov 11, 2013 7:32 am
User avatar
Mafia Don
Legendary Family Member
  • Gender: Male
  • Posts: 12814
  • Joined: Nov, 2007
  • Advertisements: 406
  • Karma: 204
D.M wrote:
Don Von Free Credits wrote:
hidrocalida wrote:
Can any one else tell me if this really works?


Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.


This only works if the password is stored in the web browser? Cause if so, you could get a hole of people's profiles if they are using FireFox and install them on a new machine to look through. Not sure how other browsers work so idk if they store all your settings/addons in a profile.


All browsers that store passwords are vulnerable to this type of attack. The only difference between DM's solution and the opening post is that the opening post does not require you to install extra software ... the opening post just abuses javascript injections. Both methods are grabbing the passwords from the same source.
Fri Jan 03, 2014 9:44 am
User avatar
  • Posts: 10
  • Joined: Jan, 2014
  • Karma: 0
But it only works if you have access to the box the password is stored on, because the user has to put the code into the url bar while the filled password input field is visible.

If you're at someone else's comp and for some reason feel the need to read their pw, it's propably easier to either look at the pw manager, or open the browser dev tool and change the input type from password to text.
By the way, for that reason it's smart to use a master pw if you're storing passwords in your browser. :)
Fri Jan 03, 2014 4:37 pm
User avatar
Mafia Don
Legendary Family Member
  • Gender: Male
  • Posts: 12814
  • Joined: Nov, 2007
  • Advertisements: 406
  • Karma: 204
little_tramp wrote:
But it only works if you have access to the box the password is stored on, because the user has to put the code into the url bar while the filled password input field is visible.

If you're at someone else's comp and for some reason feel the need to read their pw, it's propably easier to either look at the pw manager, or open the browser dev tool and change the input type from password to text.
By the way, for that reason it's smart to use a master pw if you're storing passwords in your browser. :)


Amazing! I did not know that I could protect my saved passwords from nosy siblings using a master password. I normally just avoid saving any and all passwords, and forget them after a week ... finding myself using "forget password" functions on a daily basis.

Setting a master password on Firefox:


Sadly, with Chrome and IE you have to use third party applications to protect your passwords.
Tue Jul 22, 2014 1:03 am
User avatar
Administrator
Legendary Family Member
  • Gender: Male
  • Posts: 6284
  • Joined: Jun, 2010
  • Advertisements: 45
  • Karma: 368
Here is another one that will work for password input fields:

https://greasyfork.org/scripts/32-show- ... nmouseover

Code
window.setTimeout(function() {
  var passFields = document.querySelectorAll("input[type='password']");
  if (!passFields.length) return;
  for (var i = 0; i < passFields.length; i++) {
    passFields[i].addEventListener("mouseover", function() {
      this.type = "text";
    }, false);
    passFields[i].addEventListener("mouseout", function() {
      this.type = "password";
    }, false);
  }
}, 1000)


This is a userscript so you can install it by using a FireFox add-on such as GreaseMonkey: https://addons.mozilla.org/en-US/firefo ... asemonkey/
Tue Dec 27, 2016 8:43 am
User avatar
  • Posts: 14
  • Joined: Dec, 2016
  • Karma: 0
Works for me, lol loved it no more wrong password shit anymore i guess xD thank you Ghoku :) i really appreciate your hard work on this :> hope more scripts are coming soon love your work guys and love this site its outstanding ! i'm really wainting for more scrpts :DDD
Tue Dec 27, 2016 9:21 am
User avatar
Administrator
Legendary Family Member
  • Gender: Male
  • Posts: 6284
  • Joined: Jun, 2010
  • Advertisements: 45
  • Karma: 368
greatguy wrote:
Works for me, lol loved it no more wrong password shit anymore i guess xD thank you Ghoku i really appreciate your hard work on this :> hope more scripts are coming soon love your work guys and love this site its outstanding ! i'm really wainting for more scrpts DD


Ghoku has been banned for years, there's no point in trying to talk to him. That's why his icon is red with an X on it.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Sign in

Already have an account? Sign in here

SIGN IN NOW

Create an account

Sign up for a new account in our community. It's easy!

REGISTER A NEW ACCOUNT