search

AlessandroZ / LaZagne

Credentials recovery project
GNU Lesser General Public License v3.0
9.52k stars 2.04k forks source link

Anti Parameterized version #643

Open ducksploit opened 5 months ago

ducksploit commented 5 months ago

You must be knowing that the lazagne.exe is heavily signatured by all AVs. So to make it evasive on remote systems, security researchers generally convert the exe to shellcode using some handy tool like donut. But there is a problem, we cannot pass command line arguments in shellcode like we do while running lazagne.exe.. Like "lazagne.exe all"

I propose to release a binary exe of lazagne where no command line argument is required so it is handy to convert it to shellcode. I also recommend to shift the binary creation utility from pyinstaller to nuitka

AlessandroZ commented 4 months ago

By default, all modules are launched now.

It's easy to use nuitka now, I will see if I will add it to the Github action to generate all release with nuitka. Let me some time to decide it.

AlessandroZ commented 4 months ago

Have you managed to compile it with nuitka and to launch it as a shellcode ? I have tried but the shellcode does not seem to be launched. I may miss something.