rapid7/metasploit-framework — pull request #36 by mubix (2011-11-29 20:18:45+00:00)
Title: switched %USERPROFILE% to %APPDATA% to make the code a bit more universal

a quick change to the thunderbird password stealer changing %USERPROFILE% to %APPDATA% which cross platform points to the destination we are stealing the passwords from.