The LaZagne Project - Tool To Retrieve the Passwords Stored On a Local Computer

The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques (plaintext, APIs, custom algorithms, databases, etc.). This tool has been developed for the purpose of finding these passwords for the most commonly-used software.

Note: You antivirus may detect LaZagne as a virus. So, disable your antivirus while downloading/using it.

Requirements:

To compile the source code, some external libraries are required. Python 2.7 is needed to compile the project on both systems.

• For Windows:
• • Microsoft Visual C++ Compiler for Python 2.7
  • pip install pycrypto pyasn1 psutil
  • pip install http://ift.tt/2z7cCuQ

• For Linux:
• • pip install pycrypto pyasn1 dbus-python
  • pip install http://ift.tt/2z7cCuQ
  • apt-get install python-gnomekeyring python-kde4

• For Mac:
• • pip install pycrypto pyasn1

Note: For wifi passwords\Windows Secrets, launch it with administrator privileges (UAC Authentication/sudo)

Usage:

• Retrieve version

  laZagne.exe --version  

• Launch all modules

  laZagne.exe all  

• Launch only a specific module

  laZagne.exe browsers  

• Launch only a specific software script (for Firefox)

  laZagne.exe browsers -f   

• Write all passwords found into a file (-oN for Normal txt, -oJ for Json, -oA for All)

  laZagne.exe all -oN  

• Get help

laZagne.exe -h

laZagne.exe browsers -h

• Use a file for dictionary attacks (used only when it's necessary: Mozilla Master Password, system hashes, etc.). The file has to be a wordlist in cleartext (no rainbow), it has not been optimized to be fast but could be useful for basic passwords.

  laZagne.exe all -path file.txt  

• Change verbosity mode (2 different levels)

  laZagne.exe all -vv  

• Quiet mode (nothing will be printed on the standard output)

  laZagne.exe all -quiet -oA  

• Retrieve passwords on another drive (default: C)

  laZagne.exe all -drive D  

Mac OS:

In Mac OS System, without the user password, it is very difficult to retrieve passwords stored on the computer. So, I recommend using one of these options

• If you know the user password, add it in the command line

  laZagne all --password SuperSecurePassword  

• You could use the interactive mode that will prompt a dialog box to the user until the password will be correct

  laZagne all -i  

Download The LaZagne Project

You might also like:

• PenTBox - An Open Source Security Suite

• Shoryuken - An SQL Injection Tool

• NetworkMiner - Network Forensic Analysis Tool

• SoftPerfect WiFi Guard - Tool For Detecting & Alerting WiFi Network Intrusions

• BlindElephant - Web Application Fingerprinter

• theHarvester - Tool For Gathering Target Information (E-mail accounts, subdomain names, open ports and etc.)

• SI6 Networks' IPv6 Toolkit - A Security Assessment & Troubleshooting Tool For IPv6 Protocols

• Automater - Tool For Analyzing URLs/Domains, IP Addresses, and Md5 Hashes

• Web-Sorrow - Tool For Detecting Misconfigurations and Collecting Server Information

• ADHD - An Ubuntu Based Security Distribution

• Samhain - Host Based Intrusion Detection System

• Knockpy - A Subdomain Scanner

• CoolNovo Password Decryptor - Tool For Recovering Stored Login Details From CoolNovo Browser

• Netcat - The TCP/IP Swiss Army Knife

• OWASP SwitchBlade - An Open-Source Denial of Service Attack Tool

• How Anonymous Hackers Changed the World (Documentary Film)

• Katana - A Portable Multi-Boot Security Distribution

• Volatility - An Open Source Memory Forensics Framework

• Qualys BrowserCheck - An Online Security Scanner

• DNSChef - An Advanced DNS Proxy

• HoneyDrive - A Honeypot Linux Distribution

• AnonTwi - Tool To Have More Privacy On Social Media

• SQLSentinel - A Cross-Platform SQLi Vulnerability Scanner

from Effect Hacking full article here