CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept KeePassXC バージョン 2.7.7 における脆弱性 CVE-2024-33901 を実証する短いプログラムです。 授業のレポートではソースコードへのリンクが必要になるかもしれないため、このリポジトリを作成しました。 脆弱性の再現方法 1. KeePassXC を開き、データベースを認証します。 2. データベースが認証されている間に、そのメモリダンプファイルを作成します。 これは PID を取得することで実現できます。次のコマンドで取得できます。 root@kitploit: ps aux | grep keepassx...

Exploit for Cleartext Storage of Sensitive Information in Memory in Keepassxc

CVE-2024-33901-ProofOfConcept Short program that demonstrates...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...

CVE-2024-33901

KeePassXC 2.7.7 is affected by CVE-2024-33901: an attacker with the victim’s privileges can recover some passwords stored in the .kdbx database via a memory dump. The vendor disputes the claim, citing unavoidable memory-management constraints in the current design. A Proof-of-Concept repo demonst...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...