How does the script verify the Firefox Master Password, and what can it be used for?

The script includes a `checkMasterPassword()` function that calls `PK11_CheckUserPassword()`. If the provided password is correct, it returns TRUE and prints the valid Master Password; otherwise it returns FALSE. This allows for brute-force attacks on the Master Password, similar to techniques used in [Penetration Techniques - Exporting Saved Passwords from Firefox Browser](/news/penetration-techniques-exporting-saved-passwords-from-firefox-browser). For an analogous approach with Chrome, see [Penetration Techniques - Offline Export of Passwords Saved in Chrome Browser](/news/penetration-techniques-offline-export-of-passwords-saved-in-chrome-browser).