LaZagne
- ID
- S0349
- Type
- Tool
- Platforms
- Linux, macOS, Windows
- Source
- attack.mitre.org
- MITRE last modified
- 4 Apr 2024
LaZagne is a post-exploitation, open-source tool used to recover stored passwords on a system. It has modules for Windows, Linux, and OSX, but is mainly focused on Windows systems. LaZagne is publicly available on GitHub.[1]
Techniques used (10)
- T1003.001 LSASS Memory
- T1003.004 LSA Secrets
- T1003.005 Cached Domain Credentials
- T1003.007 Proc Filesystem
- T1003.008 /etc/passwd and /etc/shadow
- T1552.001 Credentials In Files
- T1555 Credentials from Password Stores
- T1555.001 Keychain
- T1555.003 Credentials from Web Browsers
- T1555.004 Windows Credential Manager
Groups using it (12)
- G0022 APT3
- G0049 OilRig
- G0064 APT33
- G0069 MuddyWater
- G0077 Leafminer
- G0100 Inception
- G0102 Wizard Spider
- G0120 Evilnum
- G0131 Tonto Team
- G0139 TeamTNT
- G1015 Scattered Spider
- G1024 Akira