diff --git a/CHANGELOG b/CHANGELOG index d4fe606d..00dc726d 100755 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,12 +1,12 @@ LaZagne 2.0 (20/12/2016) - Only Windows: * only one process is launched (impersonnation is done using "ImpersonateLoggedOnUser" and no more "CreateProcessAsUser") - * no more temporary file written on the disk + * no more temporary files written on the disk * uses of powerdump from empire (thanks to adaptivethreat) to avoid writing hives on the disk (avoid "reg save ...") * better way to catch errors * json fixes (output to be more "human readable" + error encoding) - * cleaning code - * New category added called "memory": used to retrieve password on memory + * code cleaned + * New category added called "memory": used to retrieve password in memory * KeeThief added (thanks to adaptivethreat) - retrieve keepass (version 2.x) password from memory * Powershell code used from https://github.com/adaptivethreat/KeeThief/ * Browser passwords present in memory could be retrieved