CVE-2023-32784 PoC — KeePass 安全漏洞

Source

https://github.com/LeDocteurDesBits/cve-2023-32784

Associated Vulnerability

Title:KeePass 安全漏洞 (CVE-2023-32784)
Description:In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.

Description

A CVE-2023-32784 proof-of-concept implementation in Rust

Readme

# KeePass 2.X Master Password Dumper ([CVE-2023-32784](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32784))

This is a CVE-2023-32784 proof-of-concept implemented in Rust. The code is probably ugly due to my poor coding skills, feel free to make a PR to improve it.

- Original proof-of-concept [here](https://github.com/vdohney/keepass-password-dumper)
- Python proof-of-concept [here](https://github.com/CMEPW/keepass-dump-masterkey)

# License

```
/*
 * ----------------------------------------------------------------------------
 * "THE BEER-WARE LICENSE" (Revision 42):
 * <phk@FreeBSD.ORG> wrote this file.  As long as you retain this notice you
 * can do whatever you want with this stuff. If we meet some day, and you think
 * this stuff is worth it, you can buy me a beer in return.   Poul-Henning Kamp
 * ----------------------------------------------------------------------------
 */
 ```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!