performing-credential-access-with-lazagne
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the LaZagne source code from its public GitHub repository (
https://github.com/AlessandroZ/LaZagne.git) for deployment on target systems. - [COMMAND_EXECUTION]: Includes commands for executing the LaZagne binary and Python scripts to harvest credentials from various local stores, including browsers, databases, and system vaults.
- [DATA_EXFILTRATION]: Outlines procedures for dumping and exporting recovered credentials to local files (e.g., JSON format) to facilitate analysis and lateral movement planning.
Audit Metadata