Exploit for Cleartext Transmission of Sensitive Information in Keepass CVE-2023-32784

## https://sploitus.com/exploit?id=8D74FC85-A4E7-5797-AC43-17B007773F2B
# CVE-2023-32784

KeePass 2.X < version 2.54 is susceptible to a vulnerability in which the master password may be retrievable from a memory dump of an unlocked KeePass database. This was assigned [CVE-2023-32784](https://vulners.com/cve/CVE-2023-32784)

This program aims to retrieve the master password from a memory dump of a running KeePass process. It outputs potential characters by position, a potential passphrase on one line, and a JohnTheRipper mask.

## Installation

### With go installed
```sh
$ go install github.com/mister-turtle/cve-2023-32784@latest
```

### Pre-built binaries
Head to the [Releases page](https://github.com/mister-turtle/cve-2023-32784/releases) and get the latest pre-built binary for your system.

### Building from source
```sh
$ git clone github.com/mister-turtle/cve-2023-32784
$ cd cve-2023-32784
$ go buid .
```

## Usage
```
$ go run . --help
Usage of ./cve-2023-32784:
  -d string
        Path to the memory dump
```