Browser
Firefox Profile Credentials
Firefox profile credential and cookie files can contain saved passwords, password database keys, cookies, and browser session state.
Metadata
- id:
browser.firefox-profile-credentials - category:
browser - sensitivity:
critical - subcategory:
firefox - artifact types:
password-store,cookie,session - tags:
browser,firefox,credentials,cookies
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
%APPDATA%\Mozilla\Firefox\Profiles\*\logins.json | glob | windows |
%APPDATA%\Mozilla\Firefox\Profiles\*\key4.db | glob | windows |
%APPDATA%\Mozilla\Firefox\Profiles\*\key3.db | glob | windows |
%APPDATA%\Mozilla\Firefox\Profiles\*\cookies.sqlite | glob | windows |
$HOME/.mozilla/firefox/*/logins.json | glob | linux |
$HOME/.mozilla/firefox/*/key4.db | glob | linux |
$HOME/.mozilla/firefox/*/key3.db | glob | linux |
$HOME/.mozilla/firefox/*/cookies.sqlite | glob | linux |
$HOME/Library/Application Support/Firefox/Profiles/*/logins.json | glob | macos |
$HOME/Library/Application Support/Firefox/Profiles/*/key4.db | glob | macos |
$HOME/Library/Application Support/Firefox/Profiles/*/key3.db | glob | macos |
$HOME/Library/Application Support/Firefox/Profiles/*/cookies.sqlite | glob | macos |
Credential Types
saved-passwordsession-cookie
Impact
credential_access
References
Edge Profile Stores
Microsoft Edge profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.
Opera Profile Stores
Opera profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.