Edit: Make sure you correct the apostrophe and the quote of the javascript first. It seems like I having problem with the character encoding. Does anyone know how to fix it?
The combination of username-password is the popular method to authenticate someone that he or she is the authorized person to use a service or has a privilege. Username can be viewed clearly but the password is hidden behind the asterisks. Although the password is hidden but we still can view it using software that is available from the Internet.
Snadboys’ Revelation is a freeware tool that you can use to reveal password behind the asterisks. I have tested it on my FTP client and it really works. I can see my hidden password like in the screenshot below.
After you have installed SnadBoys’ Revelation, run the software and drag the crosshair cursor to the asterisks. Then, the password will be revealed in Text of Window Under ‘Cricle’ + ‘Cursor’ .
Password in Internet Explorer
I have tested SnadBoys’ Revelation in Internet Explorer 7. This powerful tool can aslo reveals the hidden password in it.
Password in Firefox
How about Firefox? Do you think SnadBoy’s Revelation can reveals the hidden password like it can do in Internet Explorer? The answer is, no. SnadBoys’ Revelation can’t reveal hidden password in Firefox. Firefox is secure than IE. However, there is a way to find out what the hidden password is.
Copy the javascript below, paste it in the address bar and hit Enter.
javascript: var p=r(); function r(){var g=0;var x=false;var x=z(document.forms);g=g+1;var w=window.frames;for(var k=0;k<w.length;k++) {var x = ((x) || (z(w[k].document.forms)));g=g+1;}if (!x) alert(’Password not found in ‘ + g + ‘ forms’);}function z(f){var b=false;for(var i=0;i<f.length;i++) {var e=f[i].elements;for(var j=0;j<e.length;j++) {if (h(e[j])) {b=true}}}return b;}function h(ej){var s=”;if (ej.type==’password’){s=ej.value;if (s!=”){prompt(’Password found ‘, s)}else{alert(’Password is blank’)}return true;}}
Then a prompt will appear with a revealed password on it. Like the image shown below. I tested it at my demo website and it works.
The purpose I’m showing this method is because, in our digital world there is no guarantee that our secrets, private documents, passwords and so on are safe. We only can tighter the securiy but we can’t make sure that the security mechanism that we use is perfect.
If you enjoyed this article, get latest updates via RSS feed or by email.
When there is a will, there will always be a way!! Nothing is practically secure these days…
Totally right. I agree with what you are saying.
[...] Thanks to Cypherhackz [...]
tq bro…
No problem mate.
very interesting information.. thank you
Wow, that is rather amazing. I always wondered if there was a way to get the text. sometimes it is annoying if you are trying to copy and paste a password across. All in all a nice discovery
[...] to CypherHackz for writing this.But According to him,Snadboys’ Revelation cannot reveal the hidden password [...]