Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LaZagne - Windows version 2.1 - Unexpected crash on Win10 after Password gathering #118

Closed
chris96it opened this issue May 4, 2017 · 12 comments

Comments

@chris96it
Copy link

chris96it commented May 4, 2017

Dear Alessandro,

Hope you're well,

After testing the new release on windows 10 64bit, i noticed that after successfully running the software
in the command prompt with the query: "laZagne.exe all", it turned out with the results and an unexpected crash.
This been said, i am unable to save my passwords into a txt file using the query: laZagne.exe all > file.txt.

Here is a screenshot of my issue, kindly apologize for the editing, i had to remove the passwords.

error

Looking forward to receive your response,

Ciao!

-Chris96it

@AlessandroZ
Copy link
Owner

Hi, thank you for your feadback and sorry for my late answer.

I will need you to test it again because I cannot reproduce this issue. It works on my win10 (x64).
I have done some commit since my last release and I think the crash has already been corrected (I hope so).

Could you please install Python and all requirements needed to try again using the last version (not the release but using the python code from my github).

If it's not possible I will send you a binary from a file sharing website tp try again. I don't want to build a new release without be sure it will correct your crash.

Thank you for your help.

Alessandro

@chris96it
Copy link
Author

chris96it commented May 11, 2017

Dear Alessandro,

Thanks a lot for your response, i was able to compile your Python Script (with all the requirements) and retrying to execute it on my Win10 x64, Python version 2.7.

Unfortunately it keep crashing after it has successfully gathered the results.

I tried with all the modules and it seems that the crash is only due to a specific module > all.

Being more exact, the crash occurs only while writing and executing the following command:

laZagne.py all

Please find in this attachment the picture with the last crash.

untitled

Looking forward to receive your response,

Best regards,

-Chris96it

@AlessandroZ
Copy link
Owner

I don't think that it's related to the write action. A write error would print a stacktrace but would not crash the process like that. I think, this is more related to the impersonation mechanism. I suppose if you run lazagne without administrator privilege, there is no crash.
I will try to check it soon and I will be back to you.

@chris96it
Copy link
Author

Hi Alessandro, i tried to test your script also without the administration privilege, same error occurred.
Let's keep in touch!
-Chris96it

@AlessandroZ
Copy link
Owner

Hmm, this is really weird if you have the same error without admin rights.

I need to know where the error occurs to be able to correct it. Could you please run lazagne with the debug output and give me the last module launched, an error message printed on the console or something to give me a clue to understand.
python laZagne.py all -vv

Some module should failed but which one, I don't know. So if you run any module individually, you do not have the crash ? You don't have error from the "windows" module ?
python laZagne.py windows

If the program terminates and you see the last line on the console "elapsed time = xxx", tell me.

Using old release, you didn't have this error or it was already present ?

Thanks.

@chris96it
Copy link
Author

chris96it commented May 11, 2017

Ciao Alessandro!

Yeah, it only happens with this current release.

Actually i noticed that the crash is due on the following modules:

"all" and "windows"

As i've noticed now, with the module "windows" i am not even able to gather the results.

Picture below:

untitled

As per the module "all", i am giving you the errors output below:

------------------- Cyberduck passwords -----------------

Cyberduck not installed.

[!] No passwords found

------------------- Puttycm passwords -----------------

[DEBUG] global name 'sx64' is not defined

Puttycm not installed

[!] No passwords found

------------------- Opensshforwindows passwords -----------------

[!] No passwords found

------------------- Filezilla passwords -----------------

Filezilla not installed.

[!] No passwords found

------------------- Apachedirectorystudio passwords -----------------

[!] No passwords found

------------------- Ftpnavigator passwords -----------------

FTP Navigator not installed or not found.

[!] No passwords found

------------------- Coreftp passwords -----------------

[DEBUG] global name 'sx64' is not defined

CoreFTP not installed

[!] No passwords found

------------------- Unattended passwords -----------------

[!] No passwords found

------------------- Winscp passwords -----------------

[DEBUG] global name 'sx64' is not defined

WinSCP not installed.

[!] No passwords found

------------------- Chrome passwords -----------------

[!] No passwords found

------------------- Internet explorer passwords -----------------

Internet Explorer passwords are stored in Vault (check vault module)

[!] No passwords found

------------------- Opera passwords -----------------

Opera is not installed.

[!] No passwords found

------------------- Firefox passwords -----------------

Profile path found: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles/ee0mzvam.default-1431979649620

[DEBUG] key: 'CHIAVE NASCOSTA'

Profile path found: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles/ee0mzvam.default-1431979649620

[DEBUG] key: 'CHIAVE NASCOSTA'

[!] No passwords found

------------------- Composer passwords -----------------

[!] No passwords found

------------------- Tortoise passwords -----------------

Tortoise not installed.

[!] No passwords found

------------------- Mavenrepositories passwords -----------------

[!] No passwords found

------------------- Gitforwindows passwords -----------------

[!] No passwords found

------------------- Dbvis passwords -----------------

Dbvisualizer not installed.

[!] No passwords found

------------------- Robomongo passwords -----------------

[!] No passwords found

------------------- Sqldeveloper passwords -----------------

SQL Developer not installed.

[!] No passwords found

------------------- Squirrel passwords -----------------

Squirrel not installed

[!] No passwords found

------------------- Credential manager passwords -----------------

Waiting for your response,

-Chris96it

@AlessandroZ
Copy link
Owner

I have added some debug output on my last commit. Could you please run it again using the last version from my github.

Launch it using this command line and give me the output (hide your passwords if some are printed):
python laZagne.py windows --cred -vvv

Thanks.

@chris96it
Copy link
Author

Dear Alessandro,

Thanks a lot for your reply, i am sharing you the new crash image and it's output below:

untitled

Text Output:

|====================================================================|
| |
| The LaZagne Project |
| |
| ! BANG BANG ! |
| |
|====================================================================|

########## User: PC ##########

------------------- Credential manager passwords -----------------

[DEBUG] Run Credential manager function

[DEBUG] CredEnumerate executed successfully

[DEBUG] cound variable: c_ulong(13L)

[DEBUG] Number of value: 13

[DEBUG] cred[i] variable: <lazagne.config.WinStructure.LP_CREDENTIAL object at 0x00000000038B7248>

[DEBUG] c variable: <lazagne.config.WinStructure.CREDENTIAL object at 0x00000000038B7348>

[DEBUG] cred[i] variable: <lazagne.config.WinStructure.LP_CREDENTIAL object at 0x00000000038B7448>

[DEBUG] c variable: <lazagne.config.WinStructure.CREDENTIAL object at 0x00000000038B7548>

[DEBUG] cred[i] variable: <lazagne.config.WinStructure.LP_CREDENTIAL object at 0x00000000038B7348>

[DEBUG] c variable: <lazagne.config.WinStructure.CREDENTIAL object at 0x00000000038B7248>

[DEBUG] value to decrypt found

[DEBUG] target: WindowsLive:(token):name=ACCOUNT NASCOSTO;serviceuri=ssl.live.com

[DEBUG] username: ACCOUNT NASCOSTO

Thanks a lot again and let me know!

Buona serata,

-Chris96it

@AlessandroZ
Copy link
Owner

Could you try again. I have done some changes on the line which produces the error.
Thanks for your help, I appreciate.

@chris96it
Copy link
Author

chris96it commented May 12, 2017

Dear Alessandro,

Now it works perfectly, no errors occurred, also tested with the other module, it works perfectly!

It seems that from my side, the issue has been resolved!

Looking forward to seeing the new Windows release!

Thanks a lot ;-)

-Chris96it

@AlessandroZ
Copy link
Owner

Great, we did it 👍

Thank you for your help, I appreciate a lot. I will build a new release soon. Thanks again.

@chris96it chris96it changed the title LaZagne - Windows version 2.1 - Unexpected crash on Win10 after gathering LaZagne - Windows version 2.1 - Unexpected crash on Win10 after Password gathering May 12, 2017
@chris96it
Copy link
Author

I appreciate! Thank you very much, especially for your patience! :lulz: 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants