• Windows
  • Big code review
  • Lots of minor bug fixed
  • If windows user found => domain passwords retrieved from credentials files
  • If windows user not found => DPAPI hash printed to bruteforce with john or hashcat (no admin privilege required)
  • New modules added postgresql and psi-im (thanks to @m41nt41n3r)
  • XP managed
  • Adding support for newest firefox version. Awesome work from lclevy: https://github.com/lclevy/firepwd
  • Adding Wdigest passwords (using mimikatz signature)
    • Works on Vista / Win7 x86 and x64
    • Thanks to
      • n1nj4sec for https://github.com/n1nj4sec/memorpy/
      • Francesco Picasso for https://github.com/RealityNet/hotoloti/blob/master/volatility/mimikatz.py
  • Note: right now, LaZagne x86 cannot read memory from a x64 process (so some modules cannot work using this build such as wdigest passwords)
    • That's why, two lazagne binaries have been built (x86 and x64).
• Linux
  • Big code review
  • Lots of minor bug fixed
  • Adding support for newest firefox version. Awesome work from lclevy: https://github.com/lclevy/firepwd