firefox_decrypt_cookies_tool
Retrieve Firefox cookies as plaintext values from a profile path, optionally filtering by host and name, for forensic analysis.
Instructions
Return Firefox cookies as already-decrypted plaintext values. Typical profile path: "C:\Users<user>\AppData\Roaming\Mozilla\Firefox\Profiles<rand>.default-release".
Firefox stores cookies plaintext in cookies.sqlite, so this tool provides parity with Chromium-style decrypt flows by normalizing plaintext values into a decrypt-oriented response.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | Optional exact cookie host filter | |
| name | No | Optional exact cookie name filter | |
| limit | No | Maximum number of cookie records to return | |
| profile_path | Yes | Absolute path to the Firefox profile directory |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||