MimiDove

Tool to dump passwords from gnome-keyring-daemon process memory.

Features :

• Dump passwords from process (based on @huntergregal's MimiPenguin) :
• Overwriting passwords found in memory (this idea was implemented in Python2 by @n1nj4sec's MimiPy)
• Smart search for passwords based on memory location
• Supports Unicode characters

Building

• Run make in the root directory of the project
• To build a debug binary with debug prints run make debug
• To build a static linked binaries run make static

Usage

./mimidove [--clean]

optional argument:
  --clean                clean found passwords from memory

Tested Systems

• CentOS 7.8.2003, GNOME Keyring 3.28.2
• Ubuntu 18.04.4 LTS, GNOME Keyring 3.28.0.2
• Ubuntu 20.04.2 LTS, GNOME Keyring 3.36.0
• Kali GNU/Linux Rolling, GNOME Keyring 3.36.0

Contact

by mail: glb.svtln@gmail.ru

Special thanks

• gentilkiwi for Mimikatz
• huntergregal for MimiPenguin
• n1nj4sec for MimiPy