{"adoption": {"forks": 134, "observed_at": "2026-08-28T04:03:17.656535+00:00", "stars": 1029}, "canonical_url": "https://ross.abutalabs.com/products/keefarce", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Extracts passwords from a KeePass 2.x database, directly from memory.", "domain": ["security", "penetration-testing"], "enriched": true, "function": ["security", "reverse-engineering"], "health_score": 20, "homepage": null, "language": "C++", "license": "BSD-3-Clause", "license_family": "permissive", "maturity": "abandoned", "member_repos": ["denandz/KeeFarce"], "name": "denandz/KeeFarce", "platform": ["windows"], "pushed_at": "2015-11-17T04:12:25+00:00", "repo": "denandz/KeeFarce", "stars": 1029, "tags": ["password-extraction", "dll-injection", "keepass", "memory-forensics", "red-team", "pentesting"], "topics": [], "urls": [], "use_cases": ["extract passwords from a running keepass process", "dump keepass database credentials from memory", "red team tool for harvesting keepass secrets", "demonstrate risk of unlocked password managers", "penetration testing credential collection on windows"], "what_it_is": "KeeFarce is a security tool that extracts passwords and other cleartext data from a running KeePass 2.x process by injecting a DLL into its memory. It dumps usernames, passwords, notes, and URLs to a CSV file using CLRMD and reflection against the KeePass process heap.", "when_to_avoid": ["you need a legitimate way to export your own KeePass database - use KeePass's built-in export instead", "you target modern KeePass versions or operating systems, as the tool was last tested on KeePass 2.28-2.30 on Windows 8.1 and has not been updated since 2015", "you need a defensive or detection tool rather than an offensive one"], "when_to_choose": []}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/keefarce", "repo": "denandz/KeeFarce", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:17.656535+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T07:07:38.724590+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "fdac245d9d517c5f1a27b1051cdf2542bf76dfb05a689cd84b9b9739867aad31", "fetched_at": "2026-08-28T04:03:17.656535+00:00", "kind": "readme", "missing": false, "url": "https://github.com/denandz/KeeFarce"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3963, "days_push": 3942, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}