#677·LaZagne

Feature Request: Add PowerShell History, Recycle Bin, and Windows Environment Variables Enumeration

Author: strikoderCreated Dec 11, 2025Updated Jul 18, 2026
Labelsenhancement

I'd like to suggest adding two new enumeration modules to LaZagne that could be valuable for credential recovery:

1. PowerShell History Module

PowerShell maintains a command history file that often contains sensitive information including:

  • Passwords passed as command-line arguments
  • Connection strings with credentials
  • API keys and tokens
  • Commands with embedded secrets

2. Recycle Bin Enumeration Module

The Recycle Bin can contain deleted files that may have stored credentials, such as:

  • Configuration files with passwords
  • Text files with credentials
  • Scripts containing API keys or connection strings
  • Key files and certificates

3. Environment Variables Module (Windows)

I see that environment variables are already checked on Linux (Environnement variable module), but this doesn't appear to exist for Windows.