People using Internet is growing at higher rates and it is hard to remember all the passwords used for various accounts and so many uses #Password Managers. Recently a tool has been developed that can steal the entire data.
The work of a password manager is to store the passwords that are saved by the users and all the similar softwares uses encryption method to safeguard the data stored. The strength of the password manager based on the encryption it will provide.
One of the popular and highly used Password manager is the #KeePass and recently a hack tool dubbed as #KeeFarce is developed by a kiwi researcher and is available for usage.
The tool uses the concept of #DLL Injection and when the user opens the KeePass and then the tool will give command to the tool to export the stored data in the current database to a dump file.
The dump will now contain all the decrypted plain text information and then it can be remotely copied by attacker.
The tool is now made available for the KeePass software only and in near future it can be made available to many password managers.
The tool he developed has been released on the GitHub and can be downloaded from here.
The Author is not responsible for any damage occurred by running the tool and it is highly recommended to be used only for educational purposes.
P.S : The post is to create awareness and not to be misused.
No comments:
Post a Comment