# Lazagne

> Use for tightly scoped local credential validation during authorized pentests. Trigger on approved host-based credential exposure review, password storage assessment, and determining whether a specific workstation or server stores recoverable credentials.

- Skill: `timsonner/lazagne` (Agent Skill)
- Install (CLI): `npx skillmds@latest add timsonner/lazagne`
- Raw SKILL.md: https://api.skillmd.com/api/skills/timsonner/lazagne/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: timsonner (https://skillmd.com/u/timsonner)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/timsonner/lazagne

---


# LaZagne

## Purpose

Use this skill only when the rules of engagement explicitly authorize validation of locally stored credentials on a named approved host.

## Phase Fit

- Primary: Validation and Controlled Impact Demonstration
- Secondary: Vulnerability Analysis, Retest and Closure

## Use When

- Need to assess whether a host stores recoverable credentials in common local sources.
- Need to validate practical password exposure after gaining approved host access.
- Need a repeatable retest after workstation or server hardening.

## Avoid When

- Local credential harvesting is not explicitly approved.
- Host scope or data-handling rules are unclear.

## Inputs

- Approved host and user context
- Explicit approval for local credential validation
- Evidence handling rules for any recovered material

## Procedure

1. Limit execution to the approved host and minimum source set.
2. Capture only the minimum proof needed to support remediation.
3. Stop as soon as the approved proof standard is met.
4. Protect all output as sensitive evidence.
5. Preserve the exact source scope for retest.

## Command Syntax

Replace sample modules with the minimum approved source set.

```cmd
:: Run all credential gathering modules
laZagne.exe all

:: Browser credentials only
laZagne.exe browsers

:: Windows credential manager
laZagne.exe windows

:: SSH and sysadmin credentials
laZagne.exe sysadmin

:: Output to file
laZagne.exe all -oN C:\temp\lazagne.txt

:: Verbose mode
laZagne.exe all -vv
```

## Evidence to Capture

- Whether the approved host stored recoverable credentials
- Exact source scope and host context used
- Minimal output needed to support remediation

## Safety Boundaries

- Use only with explicit written approval.
- Protect all recovered material as sensitive evidence.