ATT&CK

Threat actorsMITRE ATT&CK intrusion sets Malware & toolsSoftware families & tooling TechniquesTactics & techniques

ReportsPublished APT reporting SourcesEvery feed behind the archive

Developers

JSON APIFree CORS-enabled endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Loading the archive…

Open Threat Intel Archive

Indicators are treated as facts and kept with their source_vendor, source URL, and dates; every feed is credited and redistribution-restricted feeds are flagged, not dropped. ATT&CK content is © MITRE, used under its terms. See NOTICE. The archive reports intelligence; it does not editorialize threat.

Indicators Actors Sources API GitHub

Open Threat Intel Archive

← Malware & tools

S0349tool

LaZagne

LaZagne is a post-exploitation, open-source tool used to recover stored passwords on a system. It has modules for Windows, Linux, and OSX, but is mainly focused on Windows systems. LaZagne is publicly available on GitHub.

Platforms: Linux, macOS, Windows

MITRE ATT&CK ↗

Linked entities · 22

usesT1552.001Credentials In Files usesT1555.004Windows Credential Manager usesT1003.004LSA Secrets usesT1003.008/etc/passwd and /etc/shadow usesT1555.003Credentials from Web Browsers usesT1003.001LSASS Memory usesT1003.005Cached Domain Credentials usesT1555Credentials from Password Stores usesT1555.001Keychain usesT1003.007Proc Filesystem uses byG0022APT3 uses byG0120Evilnum uses byG0069MuddyWater uses byG0077Leafminer uses byG0139TeamTNT uses byG1015Scattered Spider uses byG1024Akira uses byG0049OilRig uses byG0131Tonto Team uses byG0102Wizard Spider uses byG0100Inception uses byG0064APT33