rapid7/metasploit-framework — pull request #3246 by jvennix-r7 (2014-04-11 21:21:07+00:00)
Title: Add password collection post module for Firefox shells.

Verification

- [ ] get a shell through a firefox javascript privilege exploit, like `exploit/multi/browser/firefox_proto_crmfrequest`, using `set TARGET 0` to use a js shell
- [ ] `use post/firefox/gather/passwords`, run it against the above session
- [ ] you should get a json file containing all the passwords saved in firefox