firefox_decrypt_logins_tool
Decrypt Firefox saved passwords from a profile directory using firefox_decrypt. Supports optional primary password and NSS library path for forensic analysis.
Instructions
Attempt to decrypt Firefox saved passwords via firefox_decrypt. Typical profile path: "C:\Users<user>\AppData\Roaming\Mozilla\Firefox\Profiles<rand>.default-release". Requires NSS libs and optional primary_password.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of decrypted login records to return | |
| hostname | No | Optional exact hostname filter | |
| nss_lib_path | No | Optional path to an NSS library directory for firefox_decrypt | |
| profile_path | Yes | Absolute path to the Firefox profile directory | |
| primary_password | No | Optional primary password. Leave empty or unset if none is configured |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||