Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/AlessandroZ/LaZagne

Credentials recovery project
https://github.com/AlessandroZ/LaZagne

Last synced: about 1 month ago
JSON representation

Credentials recovery project

Awesome Lists containing this project

README 

        

__The LaZagne Project !!!__

==



Description

----

The __LaZagne project__ is an open source application used to __retrieve lots of passwords__ stored on a local computer. 

Each software stores its passwords using different techniques (plaintext, APIs, custom algorithms, databases, etc.). This tool has been developed for the purpose of finding these passwords for the most commonly-used software. 



The LaZagne project



This project has been added to [pupy](https://github.com/n1nj4sec/pupy/) as a post-exploitation module. Python code will be interpreted in memory without touching the disk and it works on Windows and Linux host.



Standalones

----

Standalones are now available here: https://github.com/AlessandroZ/LaZagne/releases/



Installation

----

```

pip install -r requirements.txt

```



Usage

----

* Launch all modules

```

laZagne.exe all

```



* Launch only a specific module

```

laZagne.exe browsers

```



* Launch only a specific software script

```

laZagne.exe browsers -firefox

```



* Write all passwords found into a file (-oN for Normal txt, -oJ for Json, -oA for All).

Note: If you have problems to parse JSON results written as a multi-line strings, check [this](https://github.com/AlessandroZ/LaZagne/issues/226). 

```

laZagne.exe all -oN

laZagne.exe all -oA -output C:\Users\test\Desktop

```



* Get help

```

laZagne.exe -h

laZagne.exe browsers -h

```



* Change verbosity mode (2 different levels)

```

laZagne.exe all -vv

```



* Quiet mode (nothing will be printed on the standard output)

```

laZagne.exe all -quiet -oA

```



* To decrypt domain credentials, it could be done specifying the user windows password. Otherwise it will try all passwords already found as windows passwords. 

```

laZagne.exe all -password ZapataVive

```



__Note: For wifi passwords \ Windows Secrets, launch it with administrator privileges (UAC Authentication / sudo)__



Mac OS

----

__Note: In Mac OS System, without the user password it is very difficult to retrieve passwords stored on the computer.__ 

So, I recommend using one of these options



* If you know the user password, add it in the command line 

```

laZagne all --password SuperSecurePassword

```

* You could use the interactive mode that will prompt a dialog box to the user until the password will be correct 

```

laZagne all -i

```



Supported software

----



|  | Windows    | Linux  | Mac |

| -- | -- | -- | -- |

| Browsers | 7Star
 Amigo
 Basilisk 
 BlackHawk
 Brave
 Centbrowser
 Chedot
 Chrome Beta
 Chrome Canary
 Chromium
 Coccoc
 Comodo Dragon
 Comodo IceDragon
 Cyberfox
 DCBrowser 
 Elements Browser
 Epic Privacy Browser
 Firefox
 Google Chrome
 Icecat
 K-Meleon
 Kometa
 Microsoft Edge
 Opera
 Opera GX
 Orbitum 
 QQBrowser 
 pale Moon 
 SogouExplorer 
 Sputnik
 Torch
 Uran
 Vivaldi
 | Brave
 Chromium
 Dissenter-Browser
 Firefox
 Google Chrome
 IceCat
 Microsoft Edge
 Opera
 SlimJet
 Vivaldi | Chrome
 Firefox |

| Chats | Pidgin
 Psi
 Skype| Pidgin
 Psi |  |

| Databases | DBVisualizer
 Postgresql
 Robomongo
 Squirrel
 SQLdevelopper | DBVisualizer
 Squirrel
 SQLdevelopper  |  |

| Games | GalconFusion
 Kalypsomedia
 RogueTale
 Turba |  |  |

| Git | Git for Windows |  |  |

| Mails | Epyrus 
 Interlink 
 Outlook
 Thunderbird  | Clawsmail
 Thunderbird |  |

| Maven | Maven Apache
 |  |  |

| Dumps from memory | Keepass
 Mimikatz method | System Password |  |

| Multimedia | EyeCON
 |  |  |

| PHP | Composer
 |  |  |

| SVN | Tortoise  | | |

| Sysadmin | Apache Directory Studio
 CoreFTP
 CyberDuck
 FileZilla
 FileZilla Server
 FTPNavigator
 OpenSSH
 OpenVPN
 mRemoteNG 
 KeePass Configuration Files (KeePass1, KeePass2)
 PuttyCM
Rclone
RDPManager
 VNC
 WinSCP
 Windows Subsystem for Linux | Apache Directory Studio
 AWS
  Docker
 Environnement variable
 FileZilla
 gFTP
 History files
 Shares 
 SSH private keys 
 KeePass Configuration Files (KeePassX, KeePass2) 
 Grub 
 Rclone |  |

| Wifi | Wireless Network | Network Manager
 WPA Supplicant |  |

| Internal mechanism passwords storage | Autologon
 MSCache
 Credential Files
 Credman 
 DPAPI Hash 
 Hashdump (LM/NT)
 LSA secret
 Vault Files | GNOME Keyring
 Kwallet
 Hashdump | Keychains
 Hashdump |



Compile

----



* Using Pyinstaller

```

pyinstaller --additional-hooks-dir=. -F --onefile laZagne.py

```

* Using Nuitka

```

python3 -m nuitka --standalone --onefile --include-package=lazagne laZagne.py

```



For developers

----

Please refer to the wiki before opening an issue to understand how to compile the project or to develop a new module.

https://github.com/AlessandroZ/LaZagne/wiki



Donation

----

If you want to support my work doing a donation, I will appreciate a lot:

* Via BTC: 16zJ9wTXU4f1qfMLiWvdY3woUHtEBxyriu

* Via Paypal: https://www.paypal.me/lazagneproject



Special thanks

----

* Harmjoy for [KeeThief](https://github.com/HarmJ0y/KeeThief/)

* n1nj4sec for his [mimipy](https://github.com/n1nj4sec/mimipy) module

* Benjamin DELPY for [mimikatz](https://github.com/gentilkiwi/mimikatz), which helps me to understand some Windows API.

* @skelsec for [Pypykatz](https://github.com/skelsec/pypykatz)

* Moyix for [Creddump](https://github.com/moyix/creddump)

* N0fat for [Chainbreaker](https://github.com/n0fate/chainbreaker/)

* Richard Moore for the [AES module](https://github.com/ricmoo/pyaes)

* Todd Whiteman for the [DES module](https://github.com/toddw-as/pyDes)

* mitya57 for [secretstorage](https://github.com/mitya57/secretstorage)

* All [contributors](https://github.com/AlessandroZ/LaZagne/graphs/contributors) who help me on this project