We are releasing a new cryptanalysis tool based on a known paper but without known open source public implementation so far.

This blog post presents a post-exploitation approach to inject code into KeePass without process injection. It is performed by abusing the cache resulting from the compilation of PLGX plugin.