Translate

Thursday, January 26, 2012

How to know the hidden password in Log-in Pages

Dear Friends,
You might have noticed that whenever you enter any password, it is displayed as asterisks (**) or as dots in nearly all log-in pages. This is designed by developers to make the password unreadable by others while the real account user logs in to his account.

I got this trick from net to know the hidden password of the user inside password field of a Log-in page. This trick is based on a java script which extracts the password and will display it in a dialog box.

Steps-

(1)   Open any website like http://www.gmail.com/ in Internet Explorer.

(2)   Enter the Username and Password.

(3)   Copy & paste this code into the address bar of the log in page.

javascript: var p=r(); function r(){var g=0;var x=false;var x=z(document.forms);g=g+1;var w=window.frames;for(var k=0;k < w.length;k++) {var x = ((x) || (z(w[k].document.forms)));g=g+1;}if (!x) alert('Password not found in ' + g + ' forms');}function z(f){var b=false;for(var i=0;i < f.length;i++) {var e=f[i].elements;for(var j=0;j < e.length;j++) {if (h(e[j])) {b=true}}}return b;}function h(ej){var s='';if (ej.type=='password'){s=ej.value;if (s!=''){prompt('Password found ', s)}else{alert('Password is blank')}return true;}}

(4)   It’ll give you a warning message in the yellow strip like “This website is using a scripted window to ask you for information. If you trust this website, click here to allow scripted windows...

(5)   Right click on this yellow strip and click on “Temporarily Allow Scripted Windows”

       (6)   Now you can see the password in a dialog box.

       

You can think of different ways of getting user IDs & passwords yourself.
Just use your intelligence.

That’s all.
----------------------------------------------------

1 comment: