Unhide passwords using Javascript

by Ghoku · 10 posts
11 years ago in Javascript

Posted 11 years ago · Author

Have u ever wondered to see the password the ******* ?

Here it is, just go to the site where you want to view the ***** passwords and paste this in the url and press enter.

Code

javascript:(function(){var%20s,F,j,f,i;%20s%20=%20%22%22;
%20F%20=%20document.forms;%20for(j=0;%20j<F.length;%20++j)
%20{%20f%20=%20F[j];%20for%20(i=0;%20i<f.length;%20++i)
%20{%20if%20(f[i].type.toLowerCase()%20==%20%22password%22)
%20s%20+=%20f[i].value%20+%20%22\n%22;%20}%20}%20if
%20(s)%20alert(%22Umair%20Kazmi:%20The%20Password%20On
%20This Page:\n\n%22%20+%20s);%20else%20alert(%22There%20are
%20no%20passwords%20in%20forms%20on%20this
%20page.%22);})();

Posted 11 years ago

Can any one else tell me if this really works?

Posted 11 years ago

hidrocalida wrote:
Can any one else tell me if this really works?

Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.

Posted 11 years ago

Don Von Free Credits wrote:
hidrocalida wrote:
Can any one else tell me if this really works?

Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.

This only works if the password is stored in the web browser? Cause if so, you could get a hole of people's profiles if they are using FireFox and install them on a new machine to look through. Not sure how other browsers work so idk if they store all your settings/addons in a profile.

Posted 11 years ago

D.M wrote:
Don Von Free Credits wrote:
hidrocalida wrote:
Can any one else tell me if this really works?

Yes, it works on most sites, but it is also a near useless trick unless you forget your password ... or if you have access to your sister's computer and you feel like reading her emails.

This only works if the password is stored in the web browser? Cause if so, you could get a hole of people's profiles if they are using FireFox and install them on a new machine to look through. Not sure how other browsers work so idk if they store all your settings/addons in a profile.

All browsers that store passwords are vulnerable to this type of attack. The only difference between DM's solution and the opening post is that the opening post does not require you to install extra software ... the opening post just abuses javascript injections. Both methods are grabbing the passwords from the same source.

Posted 10 years ago

But it only works if you have access to the box the password is stored on, because the user has to put the code into the url bar while the filled password input field is visible.

If you're at someone else's comp and for some reason feel the need to read their pw, it's propably easier to either look at the pw manager, or open the browser dev tool and change the input type from password to text.
By the way, for that reason it's smart to use a master pw if you're storing passwords in your browser.

Posted 10 years ago

little_tramp wrote:
But it only works if you have access to the box the password is stored on, because the user has to put the code into the url bar while the filled password input field is visible.

If you're at someone else's comp and for some reason feel the need to read their pw, it's propably easier to either look at the pw manager, or open the browser dev tool and change the input type from password to text.
By the way, for that reason it's smart to use a master pw if you're storing passwords in your browser.

Amazing! I did not know that I could protect my saved passwords from nosy siblings using a master password. I normally just avoid saving any and all passwords, and forget them after a week ... finding myself using "forget password" functions on a daily basis.

Setting a master password on Firefox:

Sadly, with Chrome and IE you have to use third party applications to protect your passwords.

Posted 10 years ago

Here is another one that will work for password input fields:

https://greasyfork.org/scripts/32-show- ... nmouseover

Code

window.setTimeout(function() {
  var passFields = document.querySelectorAll("input[type='password']");
  if (!passFields.length) return;
  for (var i = 0; i < passFields.length; i++) {
    passFields[i].addEventListener("mouseover", function() {
      this.type = "text";
    }, false);
    passFields[i].addEventListener("mouseout", function() {
      this.type = "password";
    }, false);
  }
}, 1000)

This is a userscript so you can install it by using a FireFox add-on such as GreaseMonkey: https://addons.mozilla.org/en-US/firefo ... asemonkey/

Posted 7 years ago

Works for me, lol loved it no more wrong password shit anymore i guess xD thank you Ghoku

i really appreciate your hard work on this :> hope more scripts are coming soon love your work guys and love this site its outstanding ! i'm really wainting for more scrpts

Posted 7 years ago

greatguy wrote:
Works for me, lol loved it no more wrong password shit anymore i guess xD thank you Ghoku i really appreciate your hard work on this :> hope more scripts are coming soon love your work guys and love this site its outstanding ! i'm really wainting for more scrpts DD

Ghoku has been banned for years, there's no point in trying to talk to him. That's why his icon is red with an X on it.

Product Requests

Unhide passwords using Javascript

Create an account or sign in to comment

You need to be a member in order to leave a comment

Sign in

Already have an account? Sign in here

Create an account

Sign up for a new account in our community. It's easy!