Hacking, Security

Credentials recovery

The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques (plaintext, APIs, custom algorithms, databases, etc.). This tool has been developed for the purpose of finding these passwords for the most commonly-used software. At this moment, it supports 22 Programs on Microsoft Windows and 12 on a Linux/Unix-Like OS.


Retrieve version

laZagne.exe --version

Launch all modules

laZagne.exe all

Launch only a specific module

laZagne.exe browsers
laZagne.exe -h

Launch only a specific software script

laZagne.exe browsers -f
laZagne.exe browsers -h

Write all passwords found into a file (-w options)

laZagne.exe all -w

Use a file for dictionary attacks (used only when it’s necessary: mozilla masterpassword, system hahes, etc.). The file has to be a wordlist in cleartext (no rainbow), it has not been optmized to be fast but could useful for basic passwords.

laZagne.exe all -path file.txt

Change verbosity mode (2 different levels)

laZagne.exe all -vv

Build your own password recovery script

It’s possible to write your own script for the software of your choice. Building your own module has become extremely easy.

To do that, some code standards are to be met:

Create a class using the name of the software containing 2 importants functions:
init: used to define all arguments used to launch the class.
run: will be the main function

Add on the config.manageModules.py file your class name and your import

The output containing all passwords has to be send to the “print_output” function – ex: print_output(software_name, password_list)
password_list has to be an array of dictionnaries.

Optional: you could use the function “print_debug” to print your output
ex: print_debug(“ERROR”, “Failed to load …”)

Use an existing script to understand what I have said đŸ™‚

If you want to improve this tool, you can send me your script and it will be added to this project (authors will be, of course, credited on each script ;)).


To compile the source code, some external libraries are required.

For Windows
Python 2.7
Colorama (for the Console colors): https://pypi.python.org/pypi/colorama
Python for Windows Extensions: http://sourceforge.net/projects/pywin32/
PyCrypto: pip install pycrypto
Impacket (for Windows hashes + LSA Secrets): https://github.com/CoreSecurity/impacket
Pyasn1 (for ASN1 decoding): https://pypi.python.org/pypi/pyasn1/

For Linux
Python 2.7
PyCrypto: https://www.dlitz.net/software/pycrypto/
Dbus (Pidgin)
Python-kde4 (Kwallet)
Pyasn1 (for ASN1 decoding): https://pypi.python.org/pypi/pyasn1/

Download from GitHub.

git clone https://github.com/AlessandroZ/LaZagne /opt/LaZagne