keelog-bof

KeeLog Async BOF that captures the KeePass master password by monitoring for the unlock prompt window. When a locked KeePass database is detected, a low-level keyboard hook is installed and keystrokes are captured until the prompt window disappears by being submitted, cancelled or closeed. The...

bw-dump

BW-Dump Updated 2 : This vulnerability was assigned CVE-2023-38840. Updated : A patch was released on GitHub pull request 5813 which fixes the vulnerability. The affected versions are Bitwarden Desktop 2023.7.0 and below. Description A proof-of-concept tool that extracts the master password from ...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

KeePass-CVE-2023-32784-Exploitation-and-Defense

KeePass Memory Leak Vulnerability CVE-2023-32784:Exploitation & Defense Architecture Objective To analyse the CVE-2023-32784 vulnerability in KeePass Password Safe v2.53, demonstrate master password extraction via memory dumping, and engineer robust detection and mitigation controls. The...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 更新 この脆弱性は CVE-2023-32784 に割り当てられ、KeePass 2.54 で修正されました。Dominik Reichl 氏の迅速な対応と創造的な修正に改めて感謝します！ 明確化: パスワードはキーボードから入力される必要があり、クリップボードからコピーされたものは対象外です （「しくみ」のセクションを参照）。 あなたにできること まず、KeePass 2.54 以降に更新してください 。 次に、KeePass...

CVE-2023-32784-kdbxpassdmp

keepassdumper.py vdohney/keepass-password-dumper 的 Python 移植版本 CVE-2023-32784 — 原始 C 实现及底层技术的全部功劳归于 vdohney 。 该脚本扫描进程内存转储，查找 KeePass 2.x 的 SecureTextBoxEx 在用户输入主密码时遗留的渲染字符串，并恢复该密码除第一个字符外的所有字符。可选地，它随后使用 keepassxc-cli 针对 KDBX 文件暴力破解未知的第一个字符。 受影响版本 存在漏洞： KeePass 2.53.1 及更早版本（Windows 和 Linux）。 已修复：...

KeePass-dump-py

KeePass-dump-py My attempt to re-write the original KeePass 2.X Master Password Dumper CVE-2023-32784 POC in python. Please head over to Original POC for more details about the vulnerability and exploitation process. What this script does: 1. Checks if KeePass process is running, otherwise it...

keepass-exfil-forensics

KeePass 内存外泄 — 网络取证调查 通过逆向真实 DFIR CTF 场景（TryHackMe）中所使用的 hex → Base64 → XOR 混淆链，从 PCAP 流量中恢复被外泄的数据，随后利用 CVE-2023-32784 直接从进程内存转储中恢复 KeePass 主密码。 攻击流程示意图 Victim workstation Attacker C2 Server ------------------- ------------------- Malicious .ps1 downloaded over HTTP | v Downloads ProcDump legit...

cve-2023-32784

CVE-2023-32784 KeePass 2.X version 2.54 is susceptible to a vulnerability in which the master password may be retrievable from a memory dump of an unlocked KeePass database. This was assigned CVE-2023-32784 This program aims to retrieve the master password from a memory dump of a running KeePass...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline files and store the pid of ones with the keyword KeePass in their commandline argument. It'll then acquire the adresses of memory maps in /proc//maps that aren't directly associated with a library, meaning they have an empty file path. It'll then store the memory of all those...

Astra Linux – Vulnerability in Thunderbird

OpenPGP secret keys that were imported using Thunderbird versions 78.8.1 up to 78.10.1 were stored unencrypted on the user’s local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automaticall...

CVE-2026-75135

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

CVE-2026-75135 UpSignOn < 7.19.0 Sensitive Key Retention in Memory

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

EUVD-2026-70260

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

PT-2026-84857

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

CVE-2026-75135: Cleartext Storage of Sensitive Information in Memory

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

Exploit for Improper Restriction of Excessive Authentication Attempts in Dani-Garcia Vaultwarden

CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection...

WordPress PPWP: Password Protect Pages, Posts & Full or Partial Content plugin <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure vulnerability

Improper Authorization To Authenticated Contributor+ Master Password Exposure vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin PPWP versions = 1.9.15...