LaZagne

LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing.

The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases.

The project supports digital forensic analysis and security auditing by gathering recovered credentials and exporting them into structured text or JSON formats for external storage and analysis.

Features

Credential Recovery - Extracts and recovers passwords and secrets from browsers, applications, and operating system storage across multiple platforms.
Cross-Platform Credential Extractors - Targets credential managers and configuration files across different operating systems to recover stored secrets.
Credential Extraction Utilities - Extracts stored passwords and secrets from browsers, chat clients, databases, and configuration files.
Password Hash Recovery - Scans local files, memory dumps, and databases to recover plaintext passwords and cryptographic hashes.
Post-Exploitation Tools - Functions as a security utility for retrieving stored credentials from compromised systems during penetration testing.
Decryption Utilities - Unlocks and retrieves encrypted domain credentials using discovered or provided system passwords.
Digital Forensics and Analysis - Gathers and saves stored credentials to files to support deep-dive digital forensic investigations and security auditing.
Credential Access - Extracts locally stored passwords from various applications and browsers.
Credential Access Tools - Tool for retrieving passwords stored in various local applications.
Credential Dumping - Retrieves various passwords stored on local systems.
Credential Harvesting - Extracts credentials from various applications.
Password Attacks - Credential recovery tool for extracting passwords from local applications.
Windows Security Utilities - Recovers stored credentials from various applications.

Star history

AlessandroZLaZagne

Name: alessandroz/lazagne
Author: AlessandroZ

View on GitHub

10,867 stars2,113 forksPythonLGPL-3.014 views

LaZagne

The project supports digital forensic analysis and security auditing by gathering recovered credentials and exporting them into structured text or JSON formats for external storage and analysis.

Features

Credential Recovery - Extracts and recovers passwords and secrets from browsers, applications, and operating system storage across multiple platforms.
Cross-Platform Credential Extractors - Targets credential managers and configuration files across different operating systems to recover stored secrets.
Credential Extraction Utilities - Extracts stored passwords and secrets from browsers, chat clients, databases, and configuration files.
Password Hash Recovery - Scans local files, memory dumps, and databases to recover plaintext passwords and cryptographic hashes.
Post-Exploitation Tools - Functions as a security utility for retrieving stored credentials from compromised systems during penetration testing.
Decryption Utilities - Unlocks and retrieves encrypted domain credentials using discovered or provided system passwords.
Digital Forensics and Analysis - Gathers and saves stored credentials to files to support deep-dive digital forensic investigations and security auditing.
Credential Access - Extracts locally stored passwords from various applications and browsers.
Credential Access Tools - Tool for retrieving passwords stored in various local applications.
Credential Dumping - Retrieves various passwords stored on local systems.
Credential Harvesting - Extracts credentials from various applications.
Password Attacks - Credential recovery tool for extracting passwords from local applications.
Windows Security Utilities - Recovers stored credentials from various applications.

Open-source alternatives to LaZagne

Similar open-source projects, ranked by how many features they share with LaZagne.

gentilkiwi/mimikatz
gentilkiwi/mimikatz
21,630View on GitHub
Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow
C
View on GitHub21,630
skelsec/pypykatz
skelsec/pypykatz
3,325View on GitHub
If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord
Python
View on GitHub3,325
jaykali/maskphish
jaykali/maskphish
3,020View on GitHub
Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe
Shellhackhackinghacking-tool
View on GitHub3,020
huntergregal/mimipenguin
huntergregal/mimipenguin
4,129View on GitHub
MimiPenguin is a Linux memory credential extractor and password recovery tool designed to isolate and retrieve cleartext user login passwords from active process memory. It functions as a post-exploitation utility for extracting sensitive credentials from desktop user sessions during security assessments. The tool performs Linux memory forensics by analyzing system process memory to identify and isolate credentials. It is used for security penetration testing and evaluating risks associated with memory-based attacks, as well as testing for local privilege escalation. The system targets user-
C
View on GitHub4,129

See all 30 alternatives to LaZagne

Frequently asked questions

What does alessandroz/lazagne do?

What are the main features of alessandroz/lazagne?

The main features of alessandroz/lazagne are: Credential Recovery, Cross-Platform Credential Extractors, Credential Extraction Utilities, Password Hash Recovery, Post-Exploitation Tools, Decryption Utilities, Digital Forensics and Analysis, Credential Access.

What are some open-source alternatives to alessandroz/lazagne?

Open-source alternatives to alessandroz/lazagne include: gentilkiwi/mimikatz — Mimikatz is a security research suite designed for auditing Windows authentication and managing system security… skelsec/pypykatz — If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your… jaykali/maskphish — Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network… huntergregal/mimipenguin — MimiPenguin is a Linux memory credential extractor and password recovery tool designed to isolate and retrieve… djhohnstein/sharpchromium — SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta.… ghostpack/sharpdpapi — SharpDPAPI is a C# port of some DPAPI functionality from @gentilkiwi's Mimikatz project.