2 ms·
If you have the access to the memory, you also have the access to clipboard, and keypress events. In other words, you already have the user's passwords in plain
by Grue3 11y ago
If you have the access to the memory, you also have the access to clipboard, and keypress events. In other words, you already have the user's passwords in plaintext.
- blacksmith_tb 11y agoThough KeepPass clears the clipboard (mainly to prevent the user accidentally pasting their passwords somewhere else, like a public forum). I would think if you had something running locally on a machine with an unlocked password database the KeepPass client would also be vulnerable to all kinds of gui scripting (Applescript, WSH, etc.), it's designed to let users copy and paste passwords, after all.