POC详情: 9dfdeab636807a1187e90601e9ef65f425094fe8

来源
关联漏洞
标题: KeePass 安全漏洞 (CVE-2023-32784)
描述:KeePass是一款开源的密码管理器。 KeePass 2.54之前的2.x版本存在安全漏洞,该漏洞源于即使工作区被锁定或不再运行,也可以从内存转储中恢复明文主密码。
描述
A CVE-2023-32784 proof-of-concept implementation in Rust
介绍
# KeePass 2.X Master Password Dumper ([CVE-2023-32784](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32784))

This is a CVE-2023-32784 proof-of-concept implemented in Rust. The code is probably ugly due to my poor coding skills, feel free to make a PR to improve it.

- Original proof-of-concept [here](https://github.com/vdohney/keepass-password-dumper)
- Python proof-of-concept [here](https://github.com/CMEPW/keepass-dump-masterkey)

# License

```
/*
 * ----------------------------------------------------------------------------
 * "THE BEER-WARE LICENSE" (Revision 42):
 * <phk@FreeBSD.ORG> wrote this file.  As long as you retain this notice you
 * can do whatever you want with this stuff. If we meet some day, and you think
 * this stuff is worth it, you can buy me a beer in return.   Poul-Henning Kamp
 * ----------------------------------------------------------------------------
 */
 ```
文件快照

[4.0K] /data/pocs/9dfdeab636807a1187e90601e9ef65f425094fe8 ├── [8.4K] Cargo.lock ├── [ 135] Cargo.toml ├── [ 913] README.md └── [4.0K] src └── [3.1K] main.rs 1 directory, 4 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。