Projects in Awesome Lists tagged with credentials

https://github.com/trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

credentials devsecops dynamic-analysis precommit scanning secret secret-management secrets security security-tools trufflehog verification

Last synced: 02 Apr 2026

https://github.com/trufflesecurity/truffleHog

Find, verify, and analyze leaked credentials

credentials devsecops dynamic-analysis hacktoberfest precommit scanning secret secret-management secrets security security-tools trufflehog verification

Last synced: 13 Mar 2025

https://github.com/99designs/aws-vault

A vault for securely storing and accessing AWS credentials in development environments

aws aws-vault cli credentials iam keychain mfa temporary-credentials

Last synced: 14 May 2025

https://github.com/passbolt/passbolt_api

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

cakephp cakephp4 credentials passbolt password password-manager php productivity security

Last synced: 04 Oct 2025

https://github.com/build-trust/ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

authentication authorization credentials distributed-systems e2ee encrypted-connections encrypted-messages encryption end-to-end-encryption identity kafka key-management messaging rust security snowflake trust zero-trust

Last synced: 11 Dec 2025

https://github.com/d4vinci/cr3dov3r

Know the dangers of credential reuse attacks.

credential-reuse-attacks credentials hacked-emails hacking hacking-tool haveibeenpwnd haveibeenpwned leak leaks pentesting stealth

Last synced: 05 Jan 2026

https://github.com/D4Vinci/Cr3dOv3r

Know the dangers of credential reuse attacks.

credential-reuse-attacks credentials hacked-emails hacking hacking-tool haveibeenpwnd haveibeenpwned leak leaks pentesting stealth

Last synced: 03 Apr 2025

https://github.com/praetorian-inc/noseyparker

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

credentials devsecops noseyparker penetration-testing rust scanner secrets secrets-detection security security-tools

Last synced: 14 May 2025

https://github.com/gitguardian/ggshield

Detect and validate 400+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

apikey code credentials devsecops key leak precommit scanning secrets-detection secrets-management security

Last synced: 13 May 2025

https://github.com/GitGuardian/ggshield

Find and fix 400+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

apikey code credentials devsecops iac iac-security infrastructure-as-code key leak precommit scanning secrets-detection secrets-management security

Last synced: 24 Mar 2025

https://github.com/fwdcloudsec/granted

The easiest way to access AWS.

aws cloud cloud-security credentials hacktoberfest iam keychain sso

Last synced: 14 Jan 2026

https://github.com/sorah/envchain

Environment variables meet macOS Keychain and gnome-keyring <3

credentials gnome-keyring keychain secret security

Last synced: 15 May 2025

https://github.com/common-fate/granted

The easiest way to access your cloud.

aws cloud cloud-security credentials hacktoberfest iam keychain sso

Last synced: 16 May 2025

https://github.com/mongodb/kingfisher

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 900+ rules.

credentials devsecops scanning secrets secrets-management security

Last synced: 01 May 2026

https://github.com/betterleaks/betterleaks

Scan the world (for secrets)

cicd credentials developer-tools devops devsecops git github gitleaks go golang llm-tools nhi secret secrets

Last synced: 26 May 2026

https://github.com/swiftyapp/swifty

🔑 Free Offline-first Password Manager

cipher credentials cryptography desktop desktop-app electron encryption javascript linux macos password password-manager privacy privacy-tools security windows

Last synced: 15 May 2025

https://github.com/d4vinci/elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

brute-force bruteforce common-passwords cracker credentials cupp elliot hacking-tool linux password-cracker passwords pentesting

Last synced: 16 May 2025

https://github.com/D4Vinci/elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

brute-force bruteforce common-passwords cracker credentials cupp elliot hacking-tool linux password-cracker passwords pentesting

Last synced: 24 Mar 2025

https://github.com/qeeqbox/honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

credentials emulator honeypot honeypots malware-analysis monitoring-tool network-analysis pypi pypi-package python twisted

Last synced: 14 May 2025

https://github.com/aas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

credentials love lsass mimikatz minidump procdump pypykatz spray

Last synced: 11 Jul 2025

https://github.com/qeeqbox/chameleon

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

chameleon credentials emulator grafana-interface honeypot honeypots low-interaction monitoring network proxy scan threat-hunting

Last synced: 06 Jul 2025

https://github.com/rndinfosecguy/Scavenger

Crawler (Bot) searching for credential leaks on paste sites.

bot crawler credentials leaks osint paste pastebin python

Last synced: 20 Mar 2025

https://github.com/rek7/mxtract

mXtract - Memory Extractor & Analyzer

c-plus-plus cpp cpp11 credentials exploitation linux malware memory-hacking pentesting redteam regex security security-tools stealing

Last synced: 04 Apr 2025

https://github.com/rek7/mXtract

mXtract - Memory Extractor & Analyzer

c-plus-plus cpp cpp11 credentials exploitation linux malware memory-hacking pentesting redteam regex security security-tools stealing

Last synced: 30 Mar 2025

https://github.com/synfinatic/aws-sso-cli

A powerful tool for using AWS Identity Center for the CLI and web console.

aws aws-identity-center aws-sso cli credentials credentials-helper iam iam-role keychain security-tools temporary-credentials

Last synced: 21 Oct 2025

https://github.com/chiasmod0n/chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

asn attack-surface bugbounty bugbounty-tool chiasmodon cidr credentials email-enumeration emails information-gathering intelligence intelligence-analysis osint reconnaissance reconnaissance-framework subdomain-enumeration subdomains

Last synced: 18 Apr 2025

https://github.com/simonepri/upash

🔒Unified API for password hashing algorithms

api argon bcrypt brute-force cli credential credentials hash-functions hashing nodejs password pbkdf2 rainbow-table secure security timing-attacks unified universal upash verification

Last synced: 12 Apr 2025

https://github.com/Skyscanner/whispers

Identify hardcoded secrets in static structured text

credentials devsecops hardcoded json-parser leaks lint linter parser passwords pipeline secrets secrets-detection secrets-scan security security-compliance structured-data structured-text xml-parser yaml-parser

Last synced: 02 Apr 2025

https://github.com/buttercup/buttercup-core

:tophat: The mighty NodeJS password vault

buttercup credentials datasource encryption hacktoberfest nodejs nodejs-password-vault password password-manager password-store password-vault passwords

Last synced: 16 May 2025

https://github.com/trufflesecurity/driftwood

Private key usage verification

credentials secret secret-management trufflehog

Last synced: 12 Apr 2025

https://github.com/acceis/leakscraper

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

credentials credentials-gathering leak osint pentesting python3 redteam redteaming

Last synced: 11 Oct 2025

https://github.com/SAP/credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

credentials machine-learning python regex scanner secret security security-tools

Last synced: 11 Jul 2025

https://github.com/sap/credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

credentials machine-learning python regex scanner secret security security-tools

Last synced: 15 May 2025

https://github.com/joelgmsec/leaksearch

Search & Parse Password Leaks

credentials database leak parse password python3 search

Last synced: 05 Apr 2025

https://github.com/JoelGMSec/LeakSearch

Search & Parse Password Leaks

credentials database leak parse password python3 search

Last synced: 01 Apr 2025

https://github.com/Dviros/CredsLeaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

credentials infosec powershell redteam social-engineering

Last synced: 30 Mar 2025

https://github.com/w3c/vc-data-model

W3C Verifiable Credentials v2.0 Specification

credentials standard verifiable w3c

Last synced: 15 May 2025

https://w3c.github.io/vc-data-model/

W3C Verifiable Credentials v2.0 Specification

credentials standard verifiable w3c

Last synced: 13 Mar 2025

https://github.com/byteness/aws-vault

A vault for securely storing and accessing AWS credentials in development environments

aws aws-vault cli credentials iam keychain mfa temporary-credentials

Last synced: 03 Apr 2026

https://github.com/Ullaakut/RTSPAllTheThings

Deprecated RTSP media server -- Use github.com/aler9/rtsp-simple-server instead.

broadcast camera cctv credentials encoding gstreamer media mediaserver rtsp server stream streaming video

Last synced: 05 Apr 2025

https://github.com/reugn/wifiqr

Create a QR code with your Wi-Fi login details

cli cli-app cli-tool command-line-tool credentials golang qr qr-generator qrcode qrcode-generator terminal utility wifi wifi-password

Last synced: 07 Apr 2025

https://github.com/ccob/mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

credentials dumping lsass

Last synced: 03 Apr 2025

https://github.com/PSKeePass/PoShKeePass

PowerShell module for KeePass

automation changelog-poshkeepass credential credentials impersonate keepass management masterkey posh-keepass poshkeepass powershell pskeepass

Last synced: 29 Jul 2025

https://github.com/spaze/oprah-proxy

Generate credentials for Opera's "browser VPN"

browser-vpn credentials opera opera-vpn oprah-proxy proxies proxy-server python vpn

Last synced: 09 Jul 2025

https://github.com/twelvesec/passcat

Passwords Recovery Tool

credentials credentials-gathering password-recovery password-retrieval passwords pentest pentesting redteam redteaming secrets

Last synced: 11 Jul 2025

https://github.com/twilio-labs/deadshot

Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository

automation credentials git github pull-requests scanning secrets security sensitive-data sensitive-data-security vulnerabilities

Last synced: 07 May 2025

https://github.com/binxio/cfn-secret-provider

A CloudFormation custom resource provider for deploying secrets and keys

aws aws-cloudformation aws-ssm credentials deployment keypair rsa-key

Last synced: 25 Jan 2026

https://github.com/gosecure/dllpasswordfilterimplant

DLL Password Filter Implant with Exfiltration Capabilities

active-directory credentials password pentest

Last synced: 05 Apr 2025

https://github.com/danieljoos/wincred

Go wrapper around the Windows Credential Manager API functions

credential-storage credentials go golang windows

Last synced: 16 May 2025

https://github.com/jenkinsci/credentials-plugin

Provides Jenkins with extension points to securely store, manage, and bind credentials data to other Jenkins plugins, builds, pipelines, etc.

credentials jenkins-api-plugin secrets

Last synced: 13 Feb 2026

https://github.com/iqlusioninc/veriform

Security-oriented protobuf-like serialization format with "Merkleized" content hashing support

authorization credentials cryptography hash-algorithm merkle protobuf security serialization

Last synced: 13 May 2025

https://github.com/joemiller/vault-token-helper

@Hashicorp Vault Token Helper for macOS, Linux and Windows with support for secure token storage and multiple Vault servers 🔐

credentials hashicorp-vault helper helper-tool keychain keyring linux macos token vault windows

Last synced: 12 Apr 2025

https://github.com/pinkpixel-dev/keyper

🔐 A self-hosted credential manager with zero-knowledge encryption, multi-user support, and emergency recovery. Store API keys, passwords, and secrets securely with your own Supabase database. Features AES-256-GCM encryption, Argon2 key derivation, PWA support, and professional-grade security architecture.

aes aes-encryption api-keys argon2 credential-manager credentials encryption end-to-end-encryption multi-user password-manager progressive-web-app pwa react secret-management security self-hosted supabase typescript vault zero-knowledge

Last synced: 27 May 2026

https://github.com/kristofferstrube/blazor.webauthentication

A Blazor wrapper for the Web Authentication browser API.

auth authentication blazor credential-manager credentials jsinterop wasm web web-authentication

Last synced: 06 Apr 2025

https://github.com/de-vri-es/setup-git-credentials

GitHub action to enable cloning private respositories.

actions credentials dependencies git hacktoberfest private

Last synced: 17 Mar 2026

https://github.com/KristofferStrube/Blazor.WebAuthentication

A Blazor wrapper for the Web Authentication browser API.

auth authentication blazor credential-manager credentials jsinterop wasm web web-authentication

Last synced: 18 Apr 2025

https://github.com/ayushsharma82/netwizard

A better WiFi manager + captive portal for your IoT devices (ESP32, RP2040+W, RP2350+W)

captive config credentials esp32 manager netwizard rp2040 wifi wireless wizard

Last synced: 07 Apr 2025

https://github.com/jonico/pscale-workflow-helper-scripts

Workflows and helper scripts around the PlanetScale DB workflow to automate database branch creation, association, update and merge directly out of your pull/merge request or favourite CI/CD. This is just a passion project, no official repository from Planetscale.

actions automation cli credentials helper issueops planetscale pull-requests synchronous wait zerosetup

Last synced: 10 Apr 2025

https://github.com/passbolt/passbolt-windows

Windows desktop application for Passbolt, the open source password manager for teams!

credentials passbolt password-manager passwords uwp webview2 windows

Last synced: 13 Oct 2025

https://github.com/rm1984/IMAPLoginTester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to login on IMAP servers.

credentials email hacking imap imaplib login mail mail-login password passwords penetration-testing python python3 script socks5

Last synced: 12 Jul 2025

https://github.com/jenkinsci/aws-secrets-manager-credentials-provider-plugin

AWS Secrets Manager Credentials Provider for Jenkins

aws credentials jenkins secrets secretsmanager

Last synced: 05 Apr 2025

https://github.com/cryptosphere/macaroons-rs

Macaroons: bearer credentials with caveats for distributed authorization

cookie credentials macaroons token

Last synced: 06 Apr 2025

https://github.com/dwin/goSecretBoxPassword

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

credentials golang golang-library master-passphrase nacl-secretbox password password-hash password-hashing password-safety password-security passwords passwords-encrypted scrypt secure-password secure-passwords

Last synced: 14 Mar 2025

https://github.com/d0ubl3g/Industrial-Security-Auditing-Framework

ISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial environments. This repo is a mirror of https://gitlab.com/d0ubl3g/industrial-security-auditing-framework.

credentials ftp hacking http ics ics-security industrial industrial-security isaf modbus modicon pentest plc s7 scada schneider-electric security security-audit siemens telnet

Last synced: 12 Jul 2025

https://github.com/krishpranav/phishing

This tool will steal the credentails of a person

credentials hacking hackingtool hackingtools kali-linux kali-linux-hacking kalilinux linux phishing phishing-attacks pkg termux termux-hacking termux-tool termux-tools

Last synced: 15 Apr 2025

https://github.com/jenkinsci/credentials-binding-plugin

credential-manager credentials secrets

Last synced: 04 Apr 2025

https://github.com/jenkinsci/kubernetes-credentials-provider-plugin

Credentials provider that allows storing credentials in Kubernetes

credentials jenkins-plugin kubernetes

Last synced: 05 Apr 2025

https://github.com/secretlint/webextension

Detect secrets in your request/response using secretlint.

credentials secretlint secrets security webextension

Last synced: 10 Sep 2025

https://github.com/tarcieri/ithos

A cryptographically verifiable access control and directory system for Linux servers

access-control authentication authorization blockchain capabilities credentials database delegation directory ed25519 grpc kerberos ldap pam password-server pki policy rust security x509

Last synced: 28 Mar 2025

https://github.com/passbolt/mobile-passbolt-android

Android mobile app for Passbolt, the open source password manager for teams.

android credentials kotlin passbolt password-manager passwords

Last synced: 07 Sep 2025

https://github.com/noraj/pass-station

CLI & library to search for default credentials among thousands of Products / Vendors

credentials default default-credentials default-password hacktoberfest password passwords pentest

Last synced: 03 Jan 2026

https://github.com/krishpranav/Phishing

This tool will steal the credentails of a person

credentials hacking hackingtool hackingtools kali-linux kali-linux-hacking kalilinux linux phishing phishing-attacks pkg termux termux-hacking termux-tool termux-tools

Last synced: 11 Mar 2025

https://github.com/nir0s/ghost

A simple, server/less, single-api, multi-backend, ghostly secret-store/key-store for your passwords, ssh-keys and cloud credentials. Ghost isn't real, it's just in your head.

credentials secret secret-key secret-storage secret-store serverless ssh ssh-key ssh-keys ssh-manager vault

Last synced: 12 May 2025

https://github.com/padok-team/git-secret-scanner

Find secrets in git repositories with TruffleHog & Gitleaks

auditing credentials git scan secrets security

Last synced: 07 Apr 2025

https://github.com/oleksiyrudenko/gha-git-credentials

GitHub Action for setting up git credentials

actions credentials credentials-helper github github-action github-actions workflow

Last synced: 25 Mar 2025

https://github.com/w3c/vc-data-integrity

W3C Data Integrity Specification

credentials cryptography standard vc-wg verifiable w3c

Last synced: 25 Jun 2025

https://github.com/DeepTrail/deepsecure

Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.

agent-auth agent-i ai ai-agents api-keys auth0 authentication authorization contributions-welcome credentials mcp mcp-client mcp-secu mcp-server secure-by- tool-calling

Last synced: 23 Jun 2026

https://github.com/whxitte/gixposed

Gixposed is a powerful command-line tool designed to search the commit history of Git repositories for sensitive information, such as API keys and access tokens. Its purpose is to help developers and security professionals quickly identify and remediate exposed sensitive informations in their codebases.

api-key automation code-analysis credentials cybersecurity cybersecurity-tools devsecops exposure git gitxposed-tool gixposed gixposed-github opensource scanning search secret-management secrets security vulnerability-detection

Last synced: 28 Apr 2025

https://github.com/freeletics/creds

Encrypted & plain text credentials for multiple environments

credentials rails ruby ruby-gem

Last synced: 24 Oct 2025

https://github.com/EC-DIGIT-CSIRC/credentialLeakDB

A database for storing, querying and doing stats on credential leaks

breaches credential-leaks credential-stuffing credentials haveibeenpwned leak-data leaks spycloud

Last synced: 06 Aug 2025

https://github.com/clawshell/clawshell

The Security Layer for OpenClaw, the essential safety harness for PII & sensitive credentials protection.

ai credentials harness moltbot openclaw pii rust secuirty

Last synced: 20 Feb 2026

https://github.com/sorah/mairu

on-memory AWS credentials agent and executor

aws aws-sso credentials iam temporary-credentials

Last synced: 05 Oct 2025

https://github.com/passbolt/mobile-passbolt-ios

iOS mobile app for Passbolt, the open source password manager for teams.

credentials ios passbolt password password-manager

Last synced: 30 Dec 2025

https://github.com/future-architect/awsmfa

replaces the credentials for MFA in AWS

aws awscli credentials go golang mfa sts

Last synced: 07 May 2025

https://github.com/imbue-ai/latchkey

A command-line tool that injects credentials to curl requests to known public APIs.

agent-skills agentic-ai ai-integration ai-tools authentication credentials curl http third-party-api-integration

Last synced: 10 Apr 2026

https://github.com/dieproduktmacher/serverless-env-generator

A Serverless 1.x plugin to manage environment variables with YAML and turn them into a .env file on deployment. Supports encryption with KMS, multiple stages and custom profiles.

aws aws-kms credentials encryption environment-variables serverless-plugin

Last synced: 14 Apr 2025

https://github.com/pik-9/schluessel

Node.js package for storing application credentials (API keys, database passwords, etc.) encrypted in your repository.

credentials database-passwords keyfile rails vault

Last synced: 24 Feb 2026

https://github.com/wnkz/aws-sso

Command Line tool for AWS SSO Credentials

aws aws-sso cli cloud credentials

Last synced: 30 Apr 2025

https://github.com/uetchy/git-account

git account manager.

credentials git

Last synced: 19 Apr 2025

https://github.com/scipag/kleptokitty

Invoke-KleptoKitty - Deploys Payloads and collects credentials

credentials credentials-gathering evasion lateral-movement lsa mimikatz powershell psexec redteam remote-control remote-execution windows windows-remote-management wmi

Last synced: 21 Apr 2025

https://github.com/r-lib/gitcreds

Query git credentials from R

credentials credentials-helper git github r

Last synced: 04 Apr 2025

https://github.com/gitguardian/gitguardian-vscode

Stop leaks. Safeguard your secrets with GitGuardian. GitGuardian actively prevents accidental exposure of sensitive information in your code, allowing you to code confidently and maintain the integrity of your data.

appsec credentials devsecops scanning secrets secrets-detection secrets-engine secrets-management secrets-scan security vscode vscode-extension