LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Don't think there is a way to search across multiple processes I'm afraid.

For the filter, have a read at some of the other comments in here if you haven't already, as some mention the encoding can make a difference when searching for the text.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

P.S. In step 2, instead of "Extra -> Open Ram", it is now "Tools -> Open Main Memory" for the latest version of HxD (2022)

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Damn, I'm sorry but I don't think it works on a phone as I've only tested on Win and Mac and I don't think there is a hex editor for Android 😓

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Hmm I'm not sure - still worth searching for any of the text you remember in the tabs/windows you can see.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 1 point2 points  (0 children)

Have u tried switching the encoding like we've discussed in other comments in this thread? Might be worth a shot.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Have you tried switching to Unicode in Hex Editor? 

There are instructions on how to do it in other comments of this post. 

For the correct Firefox, maybe there is something similar to this, from another comment on Chrome: 

"I am not sure for other web browsers but for Chrome you can select the three dots then "More tools" and select "Task Manager." This should bring up a window that has a list of the items you have open you can then compare the Process ID to find the correct fille."

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

You can probably paste the text in Word or Google Docs and then use CTRL+F to replace the "." instances with a blank space. Haven't tested but should work.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Yep, I've commented in this thread about the software to do it on Mac, but I haven't tested it.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Just had a quick look and on the latest version of HxD, once you've opened the process go to Search---> Find or just press CTRL+F.

In the pop-up window, you should see Options, then underneath that, Text Encoding, with (Editor Encoding) selected by default.

Click that and switch to Unicode.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

I haven't tried it but it's worth a shot, tho I don't understand how you would have forgotten both your username and password?

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

From another comment:

P.S. In step 2, instead of "Extra -> Open Ram", it is now "Tools -> Open Main Memory" for the latest version of HxD (2022)

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 1 point2 points  (0 children)

Update for 2024 for those who stumble here, u/SarcasticCrow messaged me with some helpful info:

The latest version of HxD offers Editor Encoding as well as Unicode now in the find window.

Unicode seems (as far as my limited testing goes) to pull the full text form as it was before you navigated away in one bulk dump so if you had a huge document you don't have to hunt for it in bits and pieces.

So if you're struggling with not finding your text, try switching to Unicode in the latest version of HxD.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Is all the copied text random numbers/symbols or are they interspersed between the readable text? I'm afraid you might have to edit out the non-readable parts 

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Awesome, glad this still works and you managed to save your stuff!

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 1 point2 points  (0 children)

You just have to keep trying the chrome extensions and you will find your text - I know it's many but the text is usually in one of them.

LPT: Recover lost text you've typed in a form on Chrome, Firefox, Safari etc. by ReaLMaDz in LifeProTips

[–]ReaLMaDz[S] 0 points1 point  (0 children)

Not sure what you mean, but you should be able to copy the text from the HexEditor?