Password managers, Teamviewer, Outlook

Obtaining Credentials | NetExec

ThievingFox - Keepass, MobaXTerm, etc

GitHub - Slowerzs/ThievingFoxGitHub

Password Managers

GitHub - efchatz/pandora: A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.GitHub

Keepass

$ NetExec smb <ip> -u user -p pass -M keepass_discover
$ NetExec smb <ip> -u user -p pass -M keepass_trigger -o KEEPASS_CONFIG_PATH="path_from_module_discovery"

CVE-2023-32784 - 2.X Master Password Dumper

Keepass < 2.54

GitHub - vdohney/keepass-password-dumper: Original PoC for CVE-2023-32784GitHub

GitHub - matro7sh/keepass-dump-masterkey: Script to retrieve the master password of a keepass database <= 2.53.1GitHub

Keepwn - Keepass 2.5x - CVE-2023-24055

GitHub - Orange-Cyberdefense/KeePwn: A python tool to automate KeePass discovery and secret extraction.GitHub

GitHub - alt3kx/CVE-2023-24055_PoC: CVE-2023-24055 PoC (KeePass 2.5x)GitHub

GitHub - deetl/CVE-2023-24055: POC and Scanner for CVE-2023-24055GitHub

Keethief - KeePass 2.X

GitHub - GhostPack/KeeThief: Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.GitHub

KeePass triggers are dead, long live KeePass triggers!

KeePass Triggers Are Dead, Long Live KeePass Triggers!d3lb3_

Or in French (Nice Talk 🥳):

Teamviewer

TeamViewer

Outlook

GitHub - amjcyber/pwnlook: An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it.GitHub

How I Discovered a $3000 Microsoft Outlook Security VulnerabilityMedium

Also check:

Credentials Hunting