LaZagne - Windows version 2.1

LaZagne 2.1 (28/04/2017)

• Only Windows

  • removing many dependencies (win32api, win32crypt, win32xxx, colorama, etc.) using ctypes
  • adding little modules
    • retrieve passwords when autologon is enabled
    • retrieve passwords stored in unattended files
  • using creddump to retrieve system hashes + LSA secrets
  • little bugs fixed + some code review

• Linux

  • adding mimipy module from n1nj4sec (https://github.com/n1nj4sec/mimipy) to retrieve the system password from memory (need root privileges)

LaZagne - Windows version 2.0

• only one process is launched (impersonnation is done using "ImpersonateLoggedOnUser" and no more "CreateProcessAsUser")
  • no more temporary file written on the disk
    • uses of powerdump from empire (thanks to adaptivethreat) to avoid writing hives on the disk (avoid "reg save ...")
• better way to catch errors
• json fixes (output to be more "human readable" + error encoding)
• cleaning code
• New category added called "memory": used to retrieve password on memory
  • KeeThief added (thanks to adaptivethreat) - retrieve keepass (version 2.x) password from memory
    • Powershell code used from https://github.com/adaptivethreat/KeeThief/
  • Browser passwords present in memory could be retrieved
    • Thanks to n1nj4sec for his awesome project "memorpy"
      • https://github.com/n1nj4sec/memorpy
• New category added called "php":
  • New module "PHP Composer" (thanks to righettod => https://github.com/righettod)

LaZagne - Windows version 1.8

cf changelog

LaZagne - Windows version 1.7

cf changelog

LaZagne - Windows version 1.6

Cf changelog 1.6

LaZagne - Windows version 1.5

cf changelog 1.5

LaZagne - Windows version 1.4

cf changelog

LaZagne - Windows version 1.3

cf changelog

LaZagne - WIndows version 1.1

cf changelog

Former-commit-id: bdbe9d56ad83f384bfb55b420ed461e0bc12a36d [formerly bdbe9d56ad83f384bfb55b420ed461e0bc12a36d [formerly bdbe9d56ad83f384bfb55b420ed461e0bc12a36d [formerly 64060a015bc2967ccd0491a5edbbb3f4fecb9ab6]]]
Former-commit-id: 6cd4267ee3545a1d65293a9c884be672cd552338
Former-commit-id: 64f0b4bd77c30af209161c313d961a3cd665e6b4
Former-commit-id: 2299bf9d79979e7bd5aede99c0485ed6ffc45a1e

LaZagne version 1.0

cf changelog v0.9.1

Former-commit-id: 94a1e2627c49afb4d3884e26f9c805a3429a06b3 [formerly 94a1e2627c49afb4d3884e26f9c805a3429a06b3 [formerly 94a1e2627c49afb4d3884e26f9c805a3429a06b3 [formerly bc3adb7b69cd14558ac3b0fa64d53239ab75a984]]]
Former-commit-id: 2786d4c47542934c13c863748ffce7dfedf52d2c
Former-commit-id: 76d674d215068e7fd08f05aed4d7df378e717d92
Former-commit-id: f67891cfc4a696f642a030184bfa984c6730d908