[addtool] KeePwn

[piyush-security]

[homepage]
https://github.com/Orange-Cyberdefense/KeePwn
[/homepage]

[tags]
keepwn, python, secret
[/tags]

[short_descr]
A python script to help red teamers discover KeePass instances and extract secrets.
[/short_descr]

[long_descr]

Features & Roadmap

KeePwn is still in early development and not fully tested yet : please use it with caution and always try it in a lab before (legally) attacking real-life targets!

• KeePass Discovery
  • Accept multiple target sources (IP, range, hostname, file)
  • Automatically look for KeePass global installation files via SMB C$ share.
  • Automatically look for KeePass portable + Windows store installation files via SMB C$ share.
  • Automatically check for running KeePass process through Impacket-based command execution.
  • Multi-thread implementation to avoid bottleneck hosts.
  • Automatically check for KeePass binary's metadata (version, last access time).
• KeePass Trigger Abuse
  • Add and remove triggers from KeePass configuration file via SMB C$ share.
  • Automatically poll for cleartext exports on the remote host.
  • Customize triggers with command line arguments.
• KeePass Cracking
  • Convert KDBX to John and Hashcat compatible formats (including KDBX 4).
• KeePass Plugin Abuse
  • Automatically upload a plugin (DLL or PFX format) to extract passwords, see KeeFarce Reborn.
  • Automatically poll for cleartext exports on the remote host.
• Authentication
  • Support LM/NT hash authentication.
  • Support Kerberos Authentication.
• Miscellaneous
  • Write unit tests.
  • Make the project available on PyPI

Installation

git clone https://github.com/Orange-Cyberdefense/KeePwn
cd KeePwn
sudo python3 setup.py install
KeePwn --help

Or if you don't want to install but just run :

git clone https://github.com/Orange-Cyberdefense/KeePwn
cd KeePwn
python3 -m pip install -r requirements.txt
python3 KeePwn.py --help

For more details : https://github.com/Orange-Cyberdefense/KeePwn#usage
[/long_descr]

[image]

[/image]

[gwen001]

Problem occured with the following fields:

• homepage should be a link

Check the guidelines or use the template created for that purpose.