This is a simple code I found in which reveals the masked password field for the current page you are on. Go to the page which has a masked password field (with text entered into it of course) and paste this into your browser:
Credits to: freedom_is_chaos of the HackInTheBox forums for shamelessly stealing it from here
ALSO WORKS WITH IE, OPERA, NETSCAPE, ETC. (Basically any browser that can use javascript)Code:javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "n"; } } if (s) alert("Passwords in forms on this page:nn" + s); else alert("There are no passwords in forms on this page.");})();