JavaScript Hack/view Autocomplete Password

Myspace: javascript:alert(document.forms(1).elements(3).value)
https://login.facebook.com/login.php:
javascript:alert(document.forms(0).elements(1).value)

Have you clicked to remember a password into a website like myspace and forgotten what it actually is?

Go to the website:
www.myspace.com

copy and paste this into the address bar:
javascript:alert(document.forms.length)

This will tell you how many forms are on the page:

The popup alert will tell you there are 5 forms.

javascript:alert(document.forms(0).name)
Now we find there names of the forms…

0 = srch
1 = aspnetForm (we are interested in this one)
2 =
3 = SearchFormTop
4 = srch

I then ran:

javascript:alert(document.forms(1).elements(1).name) = nextpage
javascript:alert(document.forms(1).elements(2).name) = Email
javascript:alert(document.forms(1).elements(3).name) = Password

Enter some info into the log in:

Email: billy
Password: Bob

Now run this:

javascript:alert(document.forms(1).elements(3).value)

the alert box will show Bob, so its read what is stored behind the dots!!!

Leave a comment

You must be logged in to post a comment.