Are there any **** password revealer for web pages and NOT only for "normal" dialog windows ?

[Peter Meister]

Recently there was a discussion about the capability of password revealers. In mean tools
which can be used to show the real password behind ******* in an entry fields.
Someone said that the password revealers can only show password of GUI based dialog windows
from the OS and NOT on entry fields on browser web pages.

Is this true? I cannot imagine this.

Peter

 

[Todd H.]

Recently there was a discussion about the capability of password revealers. In mean tools
which can be used to show the real password behind ******* in an entry fields.
Someone said that the password revealers can only show password of GUI based dialog windows
from the OS and NOT on entry fields on browser web pages.

Is this true? I cannot imagine this.

*'s passwords on webpage are trivially revealed by several firefox
plugins, or any software web proxy.

 

[Guest]

The issue is in how the web page masks the password in the text field, an
approach compeltely different from how windows applications operate.

Unless for some obscure reason the developer decided to use say JavaScript
obfuscation on password fields there's no sort of encryption or hashing
aginst these while the user is typing them in.

If you're talking revealing stored passwords in browser cookies, again it's
a fairly simple task of pulling them out as mentioned but then again so are
desktop application & Windows account passwords if you can get access to the
machine, so I don't realy know what else to say.

 

[Guest]

In general, allowing Windows to store any password is Asking For Trouble.
Unfortunately it often does-so without your permission, particularly when
connecting to network shares.

Another password-revealer is Korben's RockXP.