---
id: 4411
title: "Post-Exploitation: Abusing the KeePass Plugin Cache"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/post-exploitation-abusing-the-keepass-plugin-cache.html"
published_at: "2023-02-06T23:00:00Z"
tags: ["windows", "exploitation", "post-exploitation", "password-manager", "keepass", "plgx"]
phying_url: "https://phying.com/item/4411"
lang: en
---

# Post-Exploitation: Abusing the KeePass Plugin Cache

## Summary

A post-exploitation technique that injects code into KeePass without process injection, by abusing the cache produced when PLGX plugins are compiled.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2023-02-06T23:00:00Z
- **Original:** https://blog.quarkslab.com/post-exploitation-abusing-the-keepass-plugin-cache.html
- **Phying News:** https://phying.com/item/4411