Mar 4, 2013

Unmasking the secrets

This has been half a decade secret I've known but I'm sharing it anyways for your own safety guys. Unmasking the saved info specially the password field is extremely easy. That's right I'm using a strong word for this one, this is because it's just a matter of seconds and everything you've been saving a long time ago will be gone just like that, I mean not that long because you're taking precautions right ? just like changing the password every 2nd quarter of the year, right ? or am I right ? :P 


Anyways, moving forward, we're using chrome as our browser since chrome already has default DOM checker. I am not talking about Dirty Old Man here girls! This is Document Object Model http://en.wikipedia.org/wiki/Document_Object_Model. First up, view on the site that has saved info, we're using yahoomail as our example. 



propert of chriscupas

Now right click on the password field the one that has bullet (l) , and click on inspect element.


propert of chriscupas


It will pop up a DOM checker. 


propert of chriscupas


By here, you can now do the trick by simply changing the element type password to text.



propert of chriscupas


An voila password is exposed! 







So this one is only impossible for those browser that has DOM; most major browser nowadays already has. So I do suggest never to save any info to a publicly accessible computers. If you want to use it in firefox simply install the firebug add-on and same process on what we did here just on the first one use "Inpect element with firebug". By the way, saved password in chromes location is Settings -> Password and Forms -> Manage saved passwords . Again, take extra precautions on your passwords especially if it is in public!!!