How to solve HTB Keeper | Hack The Box 2023 | Default Credentials | Password Harvesting | KeePass

CVE-2023-32784 (15th May 2023)
https://nvd.nist.gov/vuln/detail/CVE-2023-32784
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.

Exploits
https://github.com/CMEPW/keepass-dump-masterkey/tree/main
https://github.com/z-jxy/keepass_dump

Timecodes
00:00 - Intro
00:27 - Port Scanning / Enumeration
1:39 - Website Enumeration
4:45 - Default Credentials
10:30 - User Access
12:00 - KeePass kpcli and python exploit
22:50 - putty-tools SSH key conversion
28:01 - Root Access

Tools:
OBS Studio
Da Vinci Resolve
VMware Fusion

Music:
‘Sonny And Rico’ and ‘Vecna’ by Jaxius 
https://www.youtube.com/c/Jaxius/featured
‘Starlight’ by SergePavkinMusic
https://pixabay.com/music/synthwave-starlight-162584/

Thanks to Nightmare and all Hackthebox Creators

Thanks for watching! Every view/like/comment encourages me to film more boxes.

Видео How to solve HTB Keeper | Hack The Box 2023 | Default Credentials | Password Harvesting | KeePass канала noobsec