Tools

pugazhendii22/keepass-exfil-forensics

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

entry33/aes256_passwd_store

AES-256 encrypted password manager with scrypt/SHA256 key derivation, supporting create, edit, query, and master password change operations with…

dawnl3ss/cve-2023-32784

Retrieve the master password of a keepass database <= 2.53.1

dev0558/cve-2023-32784-exploit-report

Educational demonstration of CVE-2023-32784 KeePass master password recovery via memory dump analysis, with step-by-step exploit setup and mitigation…

hau-zy/keepass-dump-py

Re-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python.

prof.shafiei/abdal-lockbox

Local-first encrypted password vault for Android with Master Password access, Recovery Key support, Autofill integration, and portable encrypted…

ctm1/cve-2023-32784-keepass-linux

KeePass Master Password Extraction PoC for Linux

jakobfriedl/keelog-bof

Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.

mister-turtle/cve-2023-32784

Extracts KeePass master passwords from memory dumps of unlocked databases, outputting potential characters by position, a passphrase, and a…

areebashoaib42/keepass-cve-2023-32784-exploitation-and-defense

Exploitation and defense-in-depth mitigation strategies for the KeePass memory leakage vulnerability (CVE-2023-32784).