KeePass-dump-py

KeePass-dump-py My attempt to re-write the original KeePass 2.X Master Password Dumper CVE-2023-32784 POC in python. Please head over to Original POC for more details about the vulnerability and exploitation process. What this script does: 1. Checks if KeePass process is running, otherwise it...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

BruteForce-to-KeePass

BruteForce-to-KeePass このスクリプトは、KeePass に影響を与える CVE-2023-32784 の脆弱性を悪用する際に、 keepass-password-dumper ツールを通じて得られた結果を補完するものです。 説明 このスクリプトは、ユーザーに文字のリストと既知のサフィックス（接尾辞）の入力を求めます。次に、リスト内の各文字と既知のサフィックスを組み合わせて、可能な文字列のリスト（辞書）を生成します。結果は、カレントディレクトリ内の "Dictionary.txt" という名前のファイルに保存されます。 その後、 PoshKPBrute...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 更新 この脆弱性は CVE-2023-32784 に割り当てられ、KeePass 2.54 で修正されました。Dominik Reichl 氏の迅速な対応と創造的な修正に改めて感謝します！ 明確化: パスワードはキーボードから入力される必要があり、クリップボードからコピーされたものは対象外です （「しくみ」のセクションを参照）。 あなたにできること まず、KeePass 2.54 以降に更新してください 。 次に、KeePass...

keepass-exfil-forensics

KeePass Memory Exfiltration — Network Forensics Investigation Recovers exfiltrated data from PCAP traffic by reversing a hex → Base64 → XOR obfuscation chain used in a real DFIR CTF scenario TryHackMe, then exploits CVE-2023-32784 to recover a KeePass master password straight from a process memor...

keepass2-password-finder

CVE-2023-32784 - KeePass 2.X パスワードダンパー これは、私がPythonで書き直したCVE-2023-32784の概念実証です。 必要なのはファイル名のみです。 使用法: root@kitploit: ./cracker.py file...

KeePass-CVE-2023-32784-Exploitation-and-Defense

KeePass メモリリーク脆弱性 CVE-2023-32784: エクスプロイトと防御アーキテクチャ 目的 KeePass Password Safe v2.53 における CVE-2023-32784 脆弱性を分析し、メモリダンプによるマスターパスワード抽出を実証し、堅牢な検出および緩和策を設計することを目的とする。 脆弱性 KeePass はマスターパスワード入力に独自の SecureTextBoxEx を使用しており、入力された全ての文字に対してプロセスのアドレス空間に文字列断片が残る。実行中のプロセスの .DMP...

CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784

This repository does not have a README...

CVE-2023-32784-Exploitation

This repository does not have a README...

Linux Distros Unpatched Vulnerability : CVE-2023-32784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. Th...

openSUSE: Security Advisory for keepass (openSUSE-SU-2023:0157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

Security update for keepass (important)

openSUSE Security Update: Security update for keepass Announcement ID: openSUSE-SU-2023:0163-1 Rating: important References: 1211397 Cross-References: CVE-2023-32784 CVSS scores: CVE-2023-32784 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP5...

openSUSE 15 Security Update : keepass (openSUSE-SU-2023:0157-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0157-1 advisory. - In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer...

Security update for keepass (important)

openSUSE Security Update: Security update for keepass Announcement ID: openSUSE-SU-2023:0157-1 Rating: important References: 1211397 Cross-References: CVE-2023-32784 CVSS scores: CVE-2023-32784 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP4...

Exploitable and unpatched KeePass vulnerability: everything you need to know

Detect and mitigate CVE-2023-32784, a vulnerability in KeePass which allows the extraction of the master password in cleartext from the application's memory...

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

A proof-of-concept PoC has been made available for a security flaw impacting the KeePass password manager that could be exploited to recover a victim's master password in cleartext under specific circumstances. The issue, tracked as CVE-2023-32784, impacts KeePass versions 2.x for Windows, Linux,...

Exploit for Cleartext Transmission of Sensitive Information in Keepass

KeePass 2.53/cmdline files and store the pid of ones with t...

CVE-2023-32784

creationtimestamp| type| source ---|---|--- 2023-05-15 12:29:24+00:00| seen| https://t.me/cibsecurity/64080 2023-05-17 11:40:29+00:00| published-proof-of-concept| https://t.me/cKure/10999 2023-05-17 14:24:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/23472 2023-05-17...