CVE-2023-32784 PoC — KeePass 安全漏洞

Source

https://github.com/hau-zy/KeePass-dump-py

Associated Vulnerability

Title:KeePass 安全漏洞 (CVE-2023-32784)
Description:KeePass是一款开源的密码管理器。 KeePass 2.54之前的2.x版本存在安全漏洞，该漏洞源于即使工作区被锁定或不再运行，也可以从内存转储中恢复明文主密码。

Description

Re-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python.

Readme

# KeePass-dump-py

My attempt to re-write the original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python. 

Please head over to [Original POC](https://github.com/vdohney/keepass-password-dumper) for more details about the vulnerability and exploitation process.

What this script does:
1. Checks if KeePass process is running, otherwise it spawns the KeePass
2. Dumps KeePass process using WerFault (code snippet adapted from LSASSY)
3. Search process dump for password

File Snapshot


 [4.0K]  /data/pocs/7f24127c5343f36bac347f49b34f3864a89a4b98
├── [2.8K]  keepassdump.py
└── [ 486]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!