FireMaster

FireMaster is a command-line application made to recover the master password from Firefox. It has three attack modes lined up, dictionary, brute force and hybrid, which can be used in accordance to the complexity of the password.

Dictionary mode is the simplest form of password decryption because it relies on the human factor. In other words, if you suspect the Firefox master password to be a common word, you can turn to this attack method. To make this happen, it's necessary to prepare a plain text document (TXT format) and populate it with words found in the dictionary (one word per line). In this case, you could resort to a website that contains all dictionary words found in your language.

The dictionary-based method is also useful if you have your own list of passwords you frequently use but aren't sure which one is correct. This works even if the keys are made out of a random combination of different characters since you can set the CLI-based utility to try all of them. The command for using the dictionary mode is Firemaster -d -f file_name, where -d gives the tool the signal to run the dictionary operation, -f tells it that the file contains one word per line, and file_name is the name of your custom-made dictionary file (make sure it's in the same location as the app).

The brute force mode takes a longer time to complete because FireMaster tries all combinations made from upper and lower case letters, numbers and symbols until it finds and recovers the Firefox master password. The command is Firemaster -b, -m length, -l length, -c charlist -p pattern, where -b refers to the brute force mode, -m is optional and indicates the minimum password length, -l is mandatory and specifies the maximum length, -c is the character list file consulted for this operation, and -p is optional and refers to the password pattern.

The hybrid mode is similar to the dictionary attack because it uses the dictionary file but it adds prefixes or suffixes using the character list file of the brute force mode. The command is Firemaster -h -f dict_file -n length -g charlist -s or -p , where -h indicates the hybrid mode, -f dict_file is the dictionary file (one word per line), -g is the group of characters used for generating the strings, -n is the maximum length of strings, -s is the suffix, and -p is the prefix.

FireMaster has some examples displayed in the console window. However, if you find it to difficult to use, you can turn to the graphical edition instead, called FireMasterCracker.