Feature Request: Add PowerShell History, Recycle Bin, and Windows Environment Variables Enumeration
Author: strikoderCreated Dec 11, 2025Updated Jul 18, 2026
Labelsenhancement
I'd like to suggest adding two new enumeration modules to LaZagne that could be valuable for credential recovery:
1. PowerShell History Module
PowerShell maintains a command history file that often contains sensitive information including:
- Passwords passed as command-line arguments
- Connection strings with credentials
- API keys and tokens
- Commands with embedded secrets
2. Recycle Bin Enumeration Module
The Recycle Bin can contain deleted files that may have stored credentials, such as:
- Configuration files with passwords
- Text files with credentials
- Scripts containing API keys or connection strings
- Key files and certificates
3. Environment Variables Module (Windows)
I see that environment variables are already checked on Linux (Environnement variable module), but this doesn't appear to exist for Windows.
Source: AlessandroZ/LaZagne