LaZagne is a credentials recovery tool that retrieves passwords stored on local computers across multiple applications and services.
The tool addresses the problem of password extraction from diverse software that each employ different storage mechanisms—plaintext files, APIs, custom encryption algorithms, and databases. LaZagne works by implementing extraction modules for commonly-used applications, allowing it to recover passwords from their respective storage locations. The tool supports launching all modules at once, targeting specific modules or individual software scripts, and outputting results in multiple formats including plain text and JSON. It can decrypt domain credentials when provided with the Windows user password, or attempt decryption using other passwords already discovered. Administrative privileges are required on Windows and Linux for accessing certain credential types like WiFi passwords and Windows Secrets. On macOS, the tool requires the user password to retrieve most stored credentials, and offers both command-line and interactive dialog-based password entry modes.
LaZagne suits penetration testers and security researchers performing post-exploitation activities or security assessments on systems where credential recovery is authorized. The tool has been integrated into Pupy as a post-exploitation module, where Python code executes in memory without writing to disk on both Windows and Linux hosts. It is most useful in scenarios where you have local system access and need to audit or recover credentials across multiple applications simultaneously. The project provides standalone executables for direct deployment without requiring a Python installation.
The project maintains active development with ongoing module additions for newly-supported software. Bug fixes and feature requests receive attention, as evidenced by documented issues and their resolutions. The codebase remains responsive to user-reported problems, including parsing issues with multi-line JSON output and platform-specific challenges. Development activity shows engagement with both Windows and Unix-like systems, reflecting the tool's cross-platform scope.
