KeePass

Master Password

KeePass databases are stored in .kdbx files.

# search for kdbx files
Get-ChildItem -Path C:\ -Include *.kdbx -File -Recurse -ErrorAction SilentlyContinue    

To crack the master password of the .kdbx file see here.

NetExec Modules

For enumerating the KeepPass configuration file see here.

Known Vulnerabilities

CVE-2023-32784-based PoC (brute-force the master-key).

sudo python3 keepass_dump.py -f ../KeePassDumpFull.dmp

For an example of the above PoC see Keeper.