Extract saved passwords from browsers, mail clients, databases, Git, and WiFi.
npx skills add https://github.com/AeonDave/malskill --skill lazagne
Please help me install this Agent Skill. Skill: lazagne Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/windows/lazagne Command: npx skills add https://github.com/AeonDave/malskill --skill lazagne
This Skill automates the recovery of saved credentials from various applications on a compromised host, streamlining post-exploitation activities.
Run lazagne.exe to dump all saved credentials from the current host.
High-intent search queries and answers about installing and using this skill.
You can extract saved passwords by running the credential recovery tool on the compromised host. It dumps credentials from browsers, mail clients, databases, Git, and WiFi to facilitate lateral movement during post-exploitation.
Post-exploitation credential recovery is the process of extracting saved passwords from local applications after gaining initial access. You need it to collect local credentials for lateral movement and identify further network penetration access points.
Administrator privileges are not strictly required but provide broader coverage. Execution in the targeted user's context extracts their specific credentials, while running as an administrator dumps credentials from a wider range of applications.
Yes, you can recover credentials from databases and Git clients. The credential recovery process targets these applications specifically, along with browsers, mail clients, and WiFi, to collect saved passwords for lateral movement.
The best way to collect local credentials is to automate credential dumping from installed applications. This streamlines post-exploitation activities by extracting saved passwords from browsers, mail, databases, and Git to aid further network access.
A limitation of extracting saved credentials is that coverage depends on execution context. Running only as the targeted user restricts results, whereas administrator privileges are needed to dump application credentials from other users.
xjtu-wangMap DPAPI-protected secrets and unwrap contexts to establish provenance.
hardw00tSimulate attacker techniques across internal networks and Active Directory environments.
wgpsecPlan and execute Linux post-exploitation workflows from initial access through privilege escalation.
dreadnodeRecover credentials and detect credential-theft tradecraft from Windows memory images with Volatility 3 and YARA.
