KeePass-TriggerLess

KeePass-TriggerLess KeePass 2.53.1 con el sistema de activación ECAS eliminado que soluciona CVE-2023-24055...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Contiene una regla yara simple para buscar posibles archivos de configuración de KeePass comprometidos Cómo usar Use un escáner de reglas yara, como yara, loki o thor-lite para escanear sistemas con esta regla. La ubicación predeterminada del archivo de configuración...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

CVE-2023-24055

creationtimestamp| type| source ---|---|--- 2023-01-24 22:52:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3705 2023-01-25 00:08:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3708 2023-01-26 05:22:21+00:00| published-proof-of-concept|...

Exploit for Cleartext Storage of Sensitive Information in Keepass

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your...

CVE-2023-24055

KeePass versions through 2.53 (in default installations) are vulnerable to unauthorized password extraction if an attacker gains write access to the KeePass.config.xml configuration file. By injecting a malicious export trigger , an attacker can force the application to export the database in Kee...