KeePass

The KeePass Extractor Fight: Memory Beats Crypto

Post author:Prabhu Kalyan Samal
Post published:May 16, 2023
Post category:Cryptography & PKI Identity & Phishing Security

A 2023 PoC scraped the KeePass master password from memory via a rogue DLL; the maintainer called it working as designed. Both were right — and the endpoint-is-the-perimeter lesson stuck.

KeePass Plaintext Export ‘Flaw’: The Trust-Boundary Debate

Post author:Prabhu Kalyan Samal
Post published:January 13, 2023
Post category:Cryptography & PKI Identity & Phishing Security

CVE-2023-24055 showed a config-planted trigger could export KeePass vaults in plaintext after unlock. The debate: feature, flaw, or threat model?