One Day Sec

What is Network Security Services (NSS) and how does Firefox use it for password management?

Network Security Services (NSS) is a set of libraries for cross-platform secure client/server applications. Firefox uses NSS as its foundational library for encryption algorithms and secure network protocols, employing the PKCS#11 standard for credential encryption and decryption. As detailed in the article, NSS is leveraged to export saved passwords via Python by calling nss3.dll and using functions like `PK11_CheckUserPassword()` and `PK11SDR_Decrypt()`. For a deeper dive into the penetration technique, see Penetration Techniques - Exporting Saved Passwords from Firefox Browser.
Network Security ServicesNSSPKCS#11Firefoxpassword export

Browse all Q&A →