In the notice sent to an unknown number of fans, NBA said the breach did not happen on their systems and the affected fans' credentials was not impacted in this incident, but some of the fans' personal information got stolen. NBA is a global sports and media organization that broadcasts its games and programs in over 215 countries or territories in at least 50 languages and manages sports leagues like the NBA, WNBA, NBA G League, Basketball Africa League, and NBA 2K League. Dropping the DLL into the plugins directory and launching KeePass should result in a beacon callback.The NBA (National Basketball Association) is alerting fans of a data breach after some of their personal information, managed by a third-party newsletter service, was stolen. With that change made, we can build our DLL and try it out.

Digging around in that class brings us to the CreatePluginInstance method: private static Plugin CreatePluginInstance(string strFilePath, string strTypeName) Īs we are using the unsafe keyword, we have to change the build properties of the project to allow unsafe code. PluginManager.cs is referencing System.Reflection (as are a few other classes). With the KeePass solution open in Visual Studio, searching for “reflection” soon confirms this suspicion. NET app, so there’s a good chance it’s using reflection to load its plugins. You can find a list of publicly available ones on their website.

KeePass supports plugins which allow users to expand the default functionality. You will also need the portable version of KeePass downloaded. NET code), KeePass and a copy of the KeePass source code from. To follow along, you’ll need Visual Studio (or some other way to build. In part 2, we’ll look at a method which doesn’t have this restriction, but for now, lets get started. This approach requires permissions to write to wherever KeePass is installed, which is usually the Program Files directory (so local admin privs required). In this post we are going to look at a method of gaining persistence using KeePass.

Keepass addon