Fox Secrets

Description#

Challenge description hints that we need to find the password from Firefox. This might be the saved password of the user. The attachment given is an ad1 file, so we need to use FTK Imager to open the file and navigate to Firefox file location.

Solution#

Through some research, we will know that the Firefox saved passwords are stored in these two files, located in the Firefox user profile:

C:\Users\<your Windows login username>\AppData\Roaming\Mozilla\Firefox\Profiles\

However, all the usernames and passwords are encrypted.

There are several tools online to decrypt it, the tool I used is this, which is found from a YouTube tutorial.