CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784

Ce depot n’a pas de fichier README...

keepass2-password-finder

CVE-2023-32784 - Estrattore di password di KeePass 2.X Questa è una prova di concetto per CVE-2023-32784, che ho riscritto in python. L'unico requisito è un nome file Utilizzo: root@kitploit: ./cracker.py file...

keepass_dump

Keepass-Dumper Esta é a minha implementação de PoC para CVE-2023-32784 A minha versão é um port em Python do PoC do @vdohney com algumas alterações e funcionalidades adicionais. Alterações Uma mudança foi usar strings conhecidas que podem ser encontradas no arquivo de dump para saltar com mais...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 Aggiornamento La vulnerabilità è stata assegnata CVE-2023-32784 e risolta in KeePass 2.54. Grazie ancora a Dominik Reichl per la sua rapida risposta e la soluzione creativa! Chiarimento: la password deve essere digitata su una tastiera, non copiat...

CVE-2023-32784-Exploitation

Dieses Repository hat keine README-Datei...

BruteForce-to-KeePass

BruteForce-to-KeePass Questo script integra i risultati ottenuti tramite lo strumento keepass-password-dumper quando si sfrutta la vulnerabilità CVE-2023-32784 che colpisce KeePass. Descrizione Questo script chiede all'utente di inserire un elenco di caratteri e un suffisso noto. Genera quindi un...

KeePass-dump-py

KeePass-dump-py Mein Versuch, den ursprünglichen KeePass 2.X Master Password Dumper CVE-2023-32784 POC in Python neu zu schreiben. Bitte besuchen Sie den ursprünglichen POC für weitere Details zur Sicherheitslücke und zum Ausnutzungsprozess. Was dieses Skript macht: 1. Prüft, ob der KeePass-Proze...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Vulnerabilità di Perdita di Memoria di KeePass CVE-2023-32784: Architettura di Sfruttamento e Difesa Obiettivo Analizzare la vulnerabilità CVE-2023-32784 in KeePass Password Safe v2.53, dimostrare l'estrazione della password master tramite dump della memoria e progettare controlli robusti di...

keepass-exfil-forensics

Esfiltrazione della Memoria di KeePass — Indagine di Network Forensics Recupera i dati esfiltrati dal traffico PCAP invertendo una catena di offuscamento hex → Base64 → XOR utilizzata in uno scenario DFIR CTF reale TryHackMe, quindi sfrutta CVE-2023-32784 per recuperare la password principale di...

Linux Distros Unpatched Vulnerability : CVE-2023-32784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. Th...

openSUSE: Security Advisory for keepass (openSUSE-SU-2023:0157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

Security update for keepass (important)

openSUSE Security Update: Security update for keepass Announcement ID: openSUSE-SU-2023:0163-1 Rating: important References: 1211397 Cross-References: CVE-2023-32784 CVSS scores: CVE-2023-32784 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5...

openSUSE 15 Security Update : keepass (openSUSE-SU-2023:0157-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0157-1 advisory. - In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer...

Security update for keepass (important)

openSUSE Security Update: Security update for keepass Announcement ID: openSUSE-SU-2023:0157-1 Rating: important References: 1211397 Cross-References: CVE-2023-32784 CVSS scores: CVE-2023-32784 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP4...

Exploitable and unpatched KeePass vulnerability: everything you need to know

Detect and mitigate CVE-2023-32784, a vulnerability in KeePass which allows the extraction of the master password in cleartext from the application's memory...

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...

Exploit for Cleartext Transmission of Sensitive Information in Keepass

KeePass 2.53/cmdline files and store the pid of ones with t...

CVE-2023-32784

creationtimestamp| type| source ---|---|--- 2023-05-15 12:29:24+00:00| seen| https://t.me/cibsecurity/64080 2023-05-17 11:40:29+00:00| published-proof-of-concept| https://t.me/cKure/10999 2023-05-17 14:24:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/23472 2023-05-17...