LaZagne README

The project's README from github.com/AlessandroZ/LaZagne. As one markdown file: README.md.

The LaZagne Project !!!

Description

The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques (plaintext, APIs, custom algorithms, databases, etc.). This tool has been developed for the purpose of finding these passwords for the most commonly-used software.

The LaZagne project

This project has been added to pupy as a post-exploitation module. Python code will be interpreted in memory without touching the disk and it works on Windows and Linux host.

Standalones

Standalones are now available here: https://github.com/AlessandroZ/LaZagne/releases/

Installation

pip install -r requirements.txt

Usage

laZagne.exe all
laZagne.exe browsers
laZagne.exe browsers -firefox
laZagne.exe all -oN
laZagne.exe all -oA -output C:\Users\test\Desktop
laZagne.exe -h
laZagne.exe browsers -h
laZagne.exe all -vv
laZagne.exe all -quiet -oA
laZagne.exe all -password ZapataVive

Note: For wifi passwords \ Windows Secrets, launch it with administrator privileges (UAC Authentication / sudo)

Mac OS

Note: In Mac OS System, without the user password it is very difficult to retrieve passwords stored on the computer. So, I recommend using one of these options

laZagne all --password SuperSecurePassword
laZagne all -i

Supported software

Windows Linux Mac
Browsers 7Star
Amigo
Basilisk
BlackHawk
Brave
Centbrowser
Chedot
Chrome Beta
Chrome Canary
Chromium
Coccoc
Comodo Dragon
Comodo IceDragon
Cyberfox
DCBrowser
Elements Browser
Epic Privacy Browser
Firefox
Google Chrome
Icecat
K-Meleon
Kometa
Microsoft Edge
Opera
Opera GX
Orbitum
QQBrowser
pale Moon
SogouExplorer
Sputnik
Torch
Uran
Vivaldi
Yandex
Brave
Chromium
Dissenter-Browser
Firefox
Google Chrome
IceCat
Microsoft Edge
Opera
SlimJet
Vivaldi
Chrome
Firefox
Chats Pidgin
Psi
Skype
Pidgin
Psi
Databases DBVisualizer
Postgresql
Robomongo
Squirrel
SQLdevelopper
DBVisualizer
Squirrel
SQLdevelopper
Games GalconFusion
Kalypsomedia
RogueTale
Turba
Git Git for Windows
Mails Epyrus
Interlink
Outlook
Thunderbird
Clawsmail
Thunderbird
Maven Maven Apache
Dumps from memory Keepass
Mimikatz method
System Password
Multimedia EyeCON
PHP Composer
SVN Tortoise
Sysadmin Apache Directory Studio
CoreFTP
CyberDuck
FileZilla
FileZilla Server
FTPNavigator
OpenSSH
OpenVPN
mRemoteNG
KeePass Configuration Files (KeePass1, KeePass2)
PuttyCM
Rclone
RDPManager
VNC
WinSCP
Windows Subsystem for Linux
Apache Directory Studio
AWS
Docker
Environnement variable
FileZilla
gFTP
History files
Shares
SSH private keys
KeePass Configuration Files (KeePassX, KeePass2)
Grub
Rclone
Wifi Wireless Network Network Manager
WPA Supplicant
Internal mechanism passwords storage Autologon
MSCache
Credential Files
Credman
DPAPI Hash
Hashdump (LM/NT)
LSA secret
Vault Files
GNOME Keyring
Kwallet
Hashdump
Keychains
Hashdump

Compile

pyinstaller --additional-hooks-dir=. -F --onefile laZagne.py
python3 -m nuitka --standalone --onefile --include-package=lazagne laZagne.py

For developers

Please refer to the wiki before opening an issue to understand how to compile the project or to develop a new module. https://github.com/AlessandroZ/LaZagne/wiki

Donation

If you want to support my work doing a donation, I will appreciate a lot:

Special thanks

LaZagne (AlessandroZ/LaZagne)

Searching Database…

这是什么?LaZagne 是一款开源工具,通过逆向分析每款软件的存储方式(明文、API、自定义算法、数据库等),找回保存在电脑本地的密码。
这是图形界面程序还是命令行工具?这是一个基于 Python 的命令行工具,需要在终端中逐个运行模块;它也可以作为 pupy 框架的后渗透模块使用。
我该怎么运行它?可以用 Python 运行源码,也可以直接下载预编译好的独立可执行文件。你可以一次启动所有模块、指定某个模块,或只运行某个软件的脚本,并通过 -oN、-oJ 或 -oA 将结果写入文件。
所有功能都需要管理员权限吗?大多数模块以普通用户身份即可运行,但 Wi-Fi 密码和 Windows Secrets 需要管理员权限(UAC 或 sudo),而解密域凭据则需要 Windows 用户密码。
在 Mac OS 上效果好吗?在 macOS 上,如果没有用户的登录密码,它的能力会大打折扣。作者建议通过命令行提供该密码,或使用交互模式,由程序提示用户输入。
它支持哪些操作系统?Windows、Linux 和 Mac OS,每个系统支持的软件和恢复技术各不相同。
它能从哪些软件中提取密码?涵盖几十类软件:浏览器(Chrome、Firefox、Opera、Vivaldi 等)、聊天客户端、数据库、邮件客户端、Git、SVN、运维工具(FileZilla、PuTTY、VNC、SSH 密钥、AWS、Docker)、Wi-Fi 网络,以及操作系统内置的密码存储,例如 Windows DPAPI、LSA secrets、Vault、Keychains 和 GNOME Keyring。
如何将它编译成独立的可执行文件?LaZagne 可以使用 PyInstaller 或 Nuitka 编译成独立的二进制文件。
我能用它解密 Windows 域凭据吗?可以。你可以提供用户的 Windows 密码来解密域凭据,也可以让它用该机器上已经找回的密码进行暴力破解。
作为后渗透模块使用时,它会写入磁盘吗?不会。通过 pupy 使用时,其 Python 代码在内存中解释执行,不会写入磁盘。
Size
3.3 MB
Stars
11K
Age
11y
Commits · 90 Days