CVE-2023-32784 PoC — KeePass 安全漏洞

Source

https://github.com/LeDocteurDesBits/cve-2023-32784

Associated Vulnerability

Title:KeePass 安全漏洞 (CVE-2023-32784)
Description:In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.

Description

A CVE-2023-32784 proof-of-concept implementation in Rust

Readme

# KeePass 2.X Master Password Dumper ([CVE-2023-32784](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32784))

This is a CVE-2023-32784 proof-of-concept implemented in Rust. The code is probably ugly due to my poor coding skills, feel free to make a PR to improve it.

- Original proof-of-concept [here](https://github.com/vdohney/keepass-password-dumper)
- Python proof-of-concept [here](https://github.com/CMEPW/keepass-dump-masterkey)

# License

```
/*
 * ----------------------------------------------------------------------------
 * "THE BEER-WARE LICENSE" (Revision 42):
 * <phk@FreeBSD.ORG> wrote this file.  As long as you retain this notice you
 * can do whatever you want with this stuff. If we meet some day, and you think
 * this stuff is worth it, you can buy me a beer in return.   Poul-Henning Kamp
 * ----------------------------------------------------------------------------
 */
 ```

File Snapshot


 [4.0K]  /data/pocs/9dfdeab636807a1187e90601e9ef65f425094fe8
├── [8.4K]  Cargo.lock
├── [ 135]  Cargo.toml
├── [ 913]  README.md
└── [4.0K]  src
    └── [3.1K]  main.rs

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!