Store sensitive information inside keepass database from c#

by

I thought about reading a KeyPass 2 database so I added a reference to KeyPass.exe in Linqpad and started to experiment. To my surprise and without any outside help (a testament to a good API), I was reading the database after only a few minutes. Here’s how I did it:

var dbpath = @"C:\path\to\passwords.kdbx";
var masterpw = "Your$uper$tr0ngMst3rP@ssw0rd";

var ioConnInfo = new IOConnectionInfo { Path = dbpath };
var compKey = new CompositeKey();
compKey.AddUserKey(new KcpPassword(masterpw));

var db = new KeePassLib.PwDatabase();
db.Open(ioConnInfo, compKey, null);

var kpdata = from entry in db.RootGroup.GetEntries(true)
                select new
                {
                    Group = entry.ParentGroup.Name,
                    Title = entry.Strings.ReadSafe("Title"),
                    Username = entry.Strings.ReadSafe("UserName"),
                    Password = entry.Strings.ReadSafe("Password"),
                    URL = entry.Strings.ReadSafe("URL"),
                    Notes = entry.Strings.ReadSafe("Notes")

                };                                                                                  

kpdata.Dump(); // this is how Linqpad outputs stuff
db.Close();

More Related Contents:

  1. What are good ways to prevent SQL injection? [duplicate]
  2. How to hash a password
  3. JWT authentication for ASP.NET Web API
  4. Why is JsonRequestBehavior needed?
  5. How to securely save username/password (local)?
  6. Requested registry access is not allowed
  7. Is SecureString ever practical in a C# application?
  8. How can I make my product as a trial version for 30 days?
  9. How can I obfuscate my c# code, so it can’t be deobfuscated so easily? [closed]
  10. Restrict access to a specific controller by IP address in ASP.NET MVC Beta
  11. MD5 hash with salt for keeping password in DB in C#
  12. In .NET/C# test if process has administrative privileges
  13. How to validate domain credentials?
  14. Storing credit card details
  15. Does using parameterized SqlCommand make my program immune to SQL injection?
  16. How to use a client certificate to authenticate and authorize in a Web API
  17. Encrypting credentials in a WPF application
  18. Best way to store encryption keys in .NET C#
  19. Securing a password in source code?
  20. Child actions are not allowed to perform redirect actions, after setting the site on HTTPS [duplicate]
  21. Calculating HMACSHA256 using c# to match payment provider example
  22. How to convert SecureString to System.String?
  23. In .NET 4.0, how do I ‘sandbox’ an in-memory assembly and execute a method?
  24. How to access the stored credentials (PasswordVault?) on Win7 and Win8?
  25. Exploitable C# Functions [closed]
  26. Compare password hashes between C# and ColdFusion (CFMX_COMPAT)
  27. RSA read PublicKey
  28. Shredding files in .NET
  29. Block requests after multiple unsuccessful logins
  30. difference between http.context.user and thread.currentprincipal and when to use them?

Leave a Comment