LaZagne
Harvests passwords stored by dozens of Windows and Linux programs.
Harvester of locally stored credentials. It walks the stores of dozens of programs (browsers, mail clients, SSH and FTP clients, databases, Wi-Fi, password managers, the Windows Credential Manager) and decrypts whatever it can with the user's own keys. You run it **after** getting a shell, and its post-exploitation yield is enormous: the password sitting in the user's FileZilla is usually the one that opens the next box.
Family Credential dumping & theft
Flags all browsers windows -oN
Concepts Credential Hunting, Credential reuse, DPAPI Secrets
Cheatsheet Credentials & run-as
Installation
# Local credential collector (browsers, wifi, RDP, etc.). Binary or .pyUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.