LaZagne 2.4

• Windows / Linux / Mac

  • Big code review and lots of bug fixed
  • PEP8 Style (thanks to @ingested)
  • Pycrypto denpendency removed

• Linux

  • Work with Python 3
  • Removing external libs to decrypt KDE secrets (only use dbus)
  • Bug fix

• Windows

  • Adding pypykatz module - awesome work from @skelsec
    • https://github.com/skelsec/pypykatz
  • Adding VNC module - thanks to @aldorm
  • Manage more than 26 different browsers now (thanks to @ingested)
  • Removing construct dependency (lots of bug fix on DPAPI as well)
  • Removing psutil dependency

• Windows
  • Big code review
  • Lots of minor bug fixed
  • If windows user found => domain passwords retrieved from credentials files
  • If windows user not found => DPAPI hash printed to bruteforce with john or hashcat (no admin privilege required)
  • New modules added postgresql and psi-im (thanks to @m41nt41n3r)
  • XP managed
  • Adding support for newest firefox version. Awesome work from lclevy: https://github.com/lclevy/firepwd
  • Adding Wdigest passwords (using mimikatz signature)
    • Works on Vista / Win7 x86 and x64
    • Thanks to
      • n1nj4sec for https://github.com/n1nj4sec/memorpy/
      • Francesco Picasso for https://github.com/RealityNet/hotoloti/blob/master/volatility/mimikatz.py
  • Note: right now, LaZagne x86 cannot read memory from a x64 process (so some modules cannot work using this build such as wdigest passwords)
    • That's why, two lazagne binaries have been built (x86 and x64).
• Linux
  • Big code review
  • Lots of minor bug fixed
  • Adding support for newest firefox version. Awesome work from lclevy: https://github.com/lclevy/firepwd

Fix unicode problem (#154)

• Only Windows
  • Bug "UnicodeDecodeError" resolved (#134)
    • Support many alphabets (for chinese, russian, ... passwords)
      • Well managed when password are written to files (Lazagne.exe all -oA), not always correct when printed on the console (depend on the system encoding)
  • New module added
    • CocCoc browser supported (#141)
  • Quiet mode added to not print anything on the console (#140) => lazagne.exe all -quiet
  • Retrieve passwords from another drive (#142) => lazagne all -drive D
  • lsa secrets are well written on files (when -oA, -oJ or -oN options are used)

Fix bug created on the previous release (cf #118)