keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule 包含一个简单的 yara 规则，用于搜索可能被入侵的 KeePass 配置文件 如何使用 使用 yara 规则扫描器（如 yara、loki 或 thor-lite）以该规则扫描系统。本地 KeePass 配置文件的默认位置为 %APPDATA%\Roaming\KeePass\KeePass.config.xml。...

KeePass-TriggerLess

KeePass-TriggerLess 移除了 ECAS 触发系统的 KeePass 2.53.1，修复 CVE-2023-24055...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

CVE-2023-24055

creationtimestamp| type| source ---|---|--- 2023-01-24 22:52:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3705 2023-01-25 00:08:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3708 2023-01-26 05:22:21+00:00| published-proof-of-concept|...

Exploit for Cleartext Storage of Sensitive Information in Keepass

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your...

CVE-2023-24055

KeePass versions through 2.53 (in default installations) are vulnerable to unauthorized password extraction if an attacker gains write access to the KeePass.config.xml configuration file. By injecting a malicious export trigger , an attacker can force the application to export the database in Kee...