{"id":37671451,"url":"https://github.com/byteskeptical/credcat","last_synced_at":"2026-01-18T00:45:40.431Z","repository":{"id":309246725,"uuid":"1031572720","full_name":"byteskeptical/credcat","owner":"byteskeptical","description":"Keeper Security Manager application vault access. Meant to be served behind a protected API enpoint, returns records as json.","archived":false,"fork":false,"pushed_at":"2025-12-21T09:05:34.000Z","size":760,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"root","last_synced_at":"2025-12-22T13:05:30.501Z","etag":null,"topics":["keeper","keeper-secret-manager","password-manager","security","security-tools","zero-knowledge"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/byteskeptical.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-08-04T02:28:20.000Z","updated_at":"2025-12-21T09:02:07.000Z","dependencies_parsed_at":"2025-12-20T09:02:59.247Z","dependency_job_id":null,"html_url":"https://github.com/byteskeptical/credcat","commit_stats":null,"previous_names":["byteskeptical/credcat"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/byteskeptical/credcat","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byteskeptical%2Fcredcat","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byteskeptical%2Fcredcat/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byteskeptical%2Fcredcat/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byteskeptical%2Fcredcat/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/byteskeptical","download_url":"https://codeload.github.com/byteskeptical/credcat/tar.gz/refs/heads/root","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byteskeptical%2Fcredcat/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28478431,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["keeper","keeper-secret-manager","password-manager","security","security-tools","zero-knowledge"],"created_at":"2026-01-16T12:04:49.138Z","updated_at":"2026-01-16T12:04:49.217Z","avatar_url":"https://github.com/byteskeptical.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ca id=\"readme-top\"\u003e\u003c/a\u003e\n\n\n\n\u003c!-- PROJECT SHIELDS --\u003e\n\u003c!--\n*** I'm using markdown \"reference style\" links for readability.\n*** Reference links are enclosed in brackets [ ] instead of parentheses ( ).\n*** See the bottom of this document for the declaration of the reference variables\n*** for contributors-url, forks-url, etc. This is an optional, concise syntax you may use.\n*** https://www.markdownguide.org/basic-syntax/#reference-style-links\n--\u003e\n[![Contributors][contributors-shield]][contributors-url]\n[![Forks][forks-shield]][forks-url]\n[![Stargazers][stars-shield]][stars-url]\n[![Issues][issues-shield]][issues-url]\n[![project_license][license-shield]][license-url]\n\n\n\n\u003c!-- PROJECT LOGO --\u003e\n\u003cbr /\u003e\n\u003cdiv align=\"center\"\u003e\n  \u003ca href=\"https://github.com/byteskeptical/credcat\"\u003e\n    \u003cimg src=\"images/logo.png\" alt=\"Logo\" width=\"80\" height=\"80\"\u003e\n  \u003c/a\u003e\n\n\u003ch3 align=\"center\"\u003ecredcat\u003c/h3\u003e\n\n  \u003cp align=\"center\"\u003e\n    Bound by sacred cyphers and powered by forgotten rites; access without a path, only a destination. Your vital sigils safe, their essence known to none but their holder, sealed by the magic of pure ignorance.\n    \u003cbr /\u003e\n    \u003ca href=\"https://github.com/byteskeptical/credcat\"\u003e\u003cstrong\u003eExplore the docs »\u003c/strong\u003e\u003c/a\u003e\n    \u003cbr /\u003e\n    \u003cbr /\u003e\n    \u003ca href=\"https://github.com/byteskeptical/credcat/issues/new?labels=bug\"\u003eReport Bug\u003c/a\u003e\n    \u0026middot;\n    \u003ca href=\"https://github.com/byteskeptical/credcat/issues/new?labels=enhancement\"\u003eRequest Feature\u003c/a\u003e\n  \u003c/p\u003e\n\u003c/div\u003e\n\n\n\n\u003c!-- TABLE OF CONTENTS --\u003e\n\u003cdetails\u003e\n  \u003csummary\u003eTable of Contents\u003c/summary\u003e\n  \u003col\u003e\n    \u003cli\u003e\n      \u003ca href=\"#about-the-project\"\u003eAbout The Project\u003c/a\u003e\n      \u003cul\u003e\n        \u003cli\u003e\u003ca href=\"#built-with\"\u003eBuilt With\u003c/a\u003e\u003c/li\u003e\n      \u003c/ul\u003e\n    \u003c/li\u003e\n    \u003cli\u003e\n      \u003ca href=\"#getting-started\"\u003eGetting Started\u003c/a\u003e\n      \u003cul\u003e\n        \u003cli\u003e\u003ca href=\"#prerequisites\"\u003ePrerequisites\u003c/a\u003e\u003c/li\u003e\n        \u003cli\u003e\u003ca href=\"#installation\"\u003eInstallation\u003c/a\u003e\u003c/li\u003e\n      \u003c/ul\u003e\n    \u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#usage\"\u003eUsage\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#roadmap\"\u003eRoadmap\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#contributing\"\u003eContributing\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#license\"\u003eLicense\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#contact\"\u003eContact\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#acknowledgments\"\u003eAcknowledgments\u003c/a\u003e\u003c/li\u003e\n  \u003c/ol\u003e\n\u003c/details\u003e\n\n\n\n\u003c!-- ABOUT THE PROJECT --\u003e\n## About The Project\n\nExtending access to Keeper secrets manager for api retrival in\ndistributed or disconnected processes. Serves as a quality of life\nabstraction to diminish the scourge of hard-coded, insecurely\nhandled credentials in our code bases.\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n### Built With\n\n* [![Java][java-shield]][java-url]\n\n_Java is like a bad relationship. It's too object-oriented_\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- GETTING STARTED --\u003e\n## Getting Started\n\nCompiling is not necessary as release binaries are available. If\nyou're so inclined the sections below are for you.\n\n### Prerequisites\n\nYour going to need a compiler, I recommend anything not Oracle java.\nDepending on your os, the installation process will vary. Additional\npackages like maven will be needed to utilize the provided pom file.\n\n#### CentOS\n* bash\n  ```sh\n  sudo dnf install java-21-openjdk java-21-openjdk-devel maven\n  ```\n\n#### Debian\n* bash\n  ```sh\n  sudo apt install maven openjdk-21-jdk-headless\n  ```\n\n#### Ubuntu\n* bash\n  ```sh\n  sudo apt install maven openjdk-21-jdk-headless\n  ```\n\n#### Windows\n* powershell\n  ```powershell\n  winget install maven\n  winget install Microsoft.OpenJDK.21\n  refreshenv\n  ```\n\n  ```powershell\n  $jdk_url = \"https://aka.ms/download-jdk/microsoft-jdk-21-windows-x64.msi\"\n  $java_home = New-Item -ItemType Directory -Path \"$env:ProgramFiles\\Java\" -Force\n  $maven_home = New-Item -ItemType Directory -Path \"$env:ProgramFiles\\Apache\\Maven\" -Force\n  $maven_version = \"3.9.11\"\n  $maven_url = \"https://dlcdn.apache.org/maven/maven-3/$maven_version/binaries/apache-maven-$maven_version-bin.zip\"\n  Start-BitsTransfer -Destination \"$env:USERPROFILE\\Downloads\\jdk-21.msi\" -Source $jdk_url\n  Start-BitsTransfer -Destination \"$env:USERPROFILE\\Downloads\\maven.zip\" -Source $maven_url\n  Start-Process -Wait -FilePath msiexec -ArgumentList /i, \"$env:USERPROFILE\\Downloads\\jdk-21.msi\", \"ADDLOCAL=FeatureMain,FeatureEnvironment,FeatureJarFileRunWith,FeatureJavaHome\", 'INSTALLDIR=\"$java_home\"', /quiet -Verb RunAs\n  Expand-Archive -DestinationPath \"$env:USERPROFILE\\Downloads\\maven\" -Path \"$env:USERPROFILE\\Downloads\\maven.zip\"\n  $parentDir = Get-ChildItem -Path \"$env:USERPROFILE\\Downloads\\maven\" | Select-Object -First 1\n  Move-Item -Destination $maven_home -Path \"$parentDir\\*\" -Force\n  [Environment]::SetEnvironmentVariable('M2_HOME', $maven_home, [System.EnvironmentVariableTarget]::User)\n  [Environment]::SetEnvironmentVariable('MAVEN_HOME', $maven_home, [System.EnvironmentVariableTarget]::User)\n  [Environment]::SetEnvironmentVariable('PATH', \"$env:PATH;$maven_home\\bin\", [System.EnvironmentVariableTarget]::User)\n  Remove-Item \"$env:USERPROFILE\\Downloads\\jdk-21.msi\"\n  Remove-Item \"$env:USERPROFILE\\Downloads\\maven.zip\"\n  Remove-Item \"$env:USERPROFILE\\Downloads\\maven\" -Recurse -Force\n  ```\n\n### Installation\n\n1. Clone the repo\n   ```sh\n   git clone https://github.com/byteskeptical/credcat.git\n   cd credcat\n   ```\n2. Compile binary, prepare release\n   ```sh\n   # build binary\n   mvn compile\n\n   # create package\n   mvn install\n\n   # prepare package for official release\n   mvn package\n   ```\n3. Run tests, (optional). Making changes, (required)\n   ```sh\n   mvn test\n   ```\n4. Clean up after yourself\n   ```sh\n   mvn clean\n   ```\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- USAGE EXAMPLES --\u003e\n## Usage\n\nYou will need to generate a device config for your KSM application in either\nbase64 or json format. You can also use the one time password feature to generate\nthe config dynamically using the clientKey parameter instead. Using the config\nparameter provides the means to switch between application vaults. You can pass\none or more of either titles and/or record uid's to retrive multiple records at\nonce. Exact matches only. Any files are downloaded locally and their save\nlocation is returned in the response.\n\n   ```sh\n   Usage: java -jar credcat.jar [ -server | '{ \"config\": \".keeper/config.base64\", \"titles\": [\"RECORD_TITLE\"], \"uids\": [\"RECORD_UID\"] }' ]\n   ```\n\n1. Payload can be any of the following.\n   ```sh\n   ADVANCED='{ \"clientKey\": \"7dae669a419ee250d0fd0e12d527f5f1\", \"config\": \"config.base64\", \"saveLocation\": \"/mnt/share/keeper\", \"titles\": [\"development ldap\"], \"uids\": [\"chnmFhEC38YCHhNY1pA8Vg\"] }'\n   TITLE_ONLY='{ \"config\": \".keeper/config.base64\", \"titles\": [\"Production ClickToCall API Key\", \"development ldap\"] }'\n   UID_ONLY='{ \"config\": \".keeper/config.base64\", \"uids\": [\"7bN_ceW-p3_alVUNmI09Tw\", \"chnmGhEC39YCHhNy1pA8vg\"] }'\n   ```\n\n2. Whether passing title or uid, records are returned nested under its respective uid.\n   ```sh\n   java -cp \"target/classes:target/dependency/*\" com.byteskeptical.credcat.SecretsService $ADVANCED\n   java -jar target/credcat.jar $UID_ONLY\n   ```\n   ```json\n   INFO: {\n     \"7bN_ceW-p3_alVUNmI09Tw\" : {\n       \"notes\" : null,\n       \"files\" : [ ],\n       \"type\" : \"login\",\n       \"title\" : \"development ldap\",\n       \"fields\" : {\n         \"password\" : [ \"bingbangboomdongle\" ],\n         \"login\" : [ \"ldaptest\" ]\n       }\n     },\n     \"chnmGhEC39YCHhNy1pA8vg\" : {\n       \"notes\" : \"VALUE = x-ClickToCall-APIKey:be0d988f-063c-d654-ad1b-a54337f87233\",\n       \"files\" : [ {\n         \"name\" : \"ascii-art.txt\",\n         \"path\" : \"/mnt/share/keeper-2452814181455428916/ascii-art.txt\"\n       }, {\n         \"name\" : \"integration.ucaas.call.metadata.PNG\",\n         \"path\" : \"/mnt/share/keeper-2452814181455428916/integration.ucaas.call.metadata.PNG\"\n       } ],\n       \"type\" : \"login\",\n       \"title\" : \"Production ClickToCall API Key\",\n       \"fields\" : {\n         \"password\" : [ \"be0d988f-063c-d654-ad1b-a54337f87233\" ],\n         \"login\" : [ \"integration.ucaas.call.metadata\" ],\n         \"fileref\" : [ \"3HcX3vCCvHBTBcOqCgCnsQ\", \"cGBiPmG_9GlZszFbsQmJea\" ]\n       }\n     }\n   }\n   ```\n\n3. Running in server mode accepts the same request payload, passed by the http client of your choice.\n   You can set your preferred host and port in the credcat properties file.\n   ```sh\n   java -cp \"target/classes:target/dependency/*\" -server\n   java -jar target/credcat.jar -server\n   ```\n   ```sh\n   curl -d $UID_ONLY -H 'Content-Type: application/json' -v -XPOST http://127.0.0.1:8888/api/getSecrets\n   curl -H 'Content-Type: application/json' -v http://127.0.0.1:8888/api/getVersion\n   ```\n\n\n\n[![Product Name Screen Shot][product-screenshot]](https://github.com/byteskeptical/credcat)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- ROADMAP --\u003e\n## Roadmap\n\n- [x] Handle all field types including files \u0026 notes\n- [x] Handle title \u0026 uid searches\n- [x] Retrieve more than one record in a single request\n- [x] Support stand-alone and server modes\n\nSee the [open issues](https://github.com/byteskeptical/credcat/issues) for a full list of proposed features (and known issues).\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- CONTRIBUTING --\u003e\n## Contributing\n\nAny contributions you make are **greatly appreciated**.\n\nIf you have a suggestion that would make this better, please fork the repo and\ncreate a pull request. You can also simply open an issue with the tag \"enhancement\".\nDon't forget to give the project a star! Thanks again!\n\n1. Fork the Project\n2. Create your Feature Branch (`git checkout -b feature/AmazingFeature`)\n3. Commit your Changes (`git commit -m 'Add some AmazingFeature'`)\n4. Push to the Branch (`git push origin feature/AmazingFeature`)\n5. Open a Pull Request\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n### Top contributors:\n\n\u003ca href=\"https://github.com/byteskeptical/credcat/graphs/root?ref_type=heads\"\u003e\n  \u003cimg src=\"https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRC9bX7LILW1fsRVXrxq-cnB7h1rNdpNn8zJA\u0026s\" alt=\"contrib image\" /\u003e\n\u003c/a\u003e\n\n\n\n\u003c!-- LICENSE --\u003e\n## License\n\nDistributed under the project_license. See `LICENSE` for more information.\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- CONTACT --\u003e\n## Contact\n\nbyteskeptical - [@byteskeptical](https://github.com/byteskeptical) - bug@byteskeptical.com\n\nProject Link: [https://github.com/byteskeptical/credcat](https://github.com/byteskeptical/credcat)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- ACKNOWLEDGMENTS --\u003e\n## Acknowledgments\n\n* [@byteskeptical](bug@byteskeptical.com)\n\n\u003cp align=\"right\"\u003e(\u003ca href=\"#readme-top\"\u003eback to top\u003c/a\u003e)\u003c/p\u003e\n\n\n\n\u003c!-- MARKDOWN LINKS \u0026 IMAGES --\u003e\n[contributors-shield]: https://img.shields.io/github/contributors/byteskeptical/credcat?style=white\n[contributors-url]: https://github.com/byteskeptical/credcat/graphs/contributors\n[forks-shield]: https://img.shields.io/github/forks/byteskeptical/credcat?style=white\n[forks-url]: https://github.com/byteskeptical/credcat/forks\n[issues-shield]: https://img.shields.io/github/issues/byteskeptical/credcat?style=white\n[issues-url]: https://github.com/byteskeptical/credcat/issues\n[java-shield]: https://img.shields.io/badge/Java-%23ED8B00.svg?logo=openjdk\u0026logoColor=white\n[java-url]: https://www.oracle.com/java/technologies/downloads/\n[license-shield]: https://img.shields.io/github/license/byteskeptical/credcat?style=white\n[license-url]: https://github.com/byteskeptical/credcat/blob/root/LICENSE\n[product-screenshot]: https://imgs.xkcd.com/comics/compiling.png\n[stars-shield]: https://img.shields.io/github/stars/byteskeptical/credcat?style=white\n[stars-url]: https://github.com/byteskeptical/credcat/stargazers\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyteskeptical%2Fcredcat","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbyteskeptical%2Fcredcat","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyteskeptical%2Fcredcat/lists"}