credentials
There are 526 repositories under credentials topic.
trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
99designs/aws-vault
A vault for securely storing and accessing AWS credentials in development environments
passbolt/passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
build-trust/ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
D4Vinci/Cr3dOv3r
Know the dangers of credential reuse attacks.
praetorian-inc/noseyparker
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
common-fate/granted
The easiest way to access your cloud.
sorah/envchain
Environment variables meet macOS Keychain and gnome-keyring <3
swiftyapp/swifty
🔑 Free Offline-first Password Manager
D4Vinci/elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
qeeqbox/honeypots
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
aas-n/spraykatz
Credentials gathering tool automating remote procdump and parse of lsass process.
rndinfosecguy/Scavenger
Crawler (Bot) searching for credential leaks on paste sites.
qeeqbox/chameleon
19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)
chiasmod0n/chiasmodon
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.
rek7/mXtract
mXtract - Memory Extractor & Analyzer
synfinatic/aws-sso-cli
A powerful tool for using AWS Identity Center for the CLI and web console.
simonepri/upash
🔒Unified API for password hashing algorithms
mikeroyal/AWS-Guide
Amazon Web Services (AWS) Guide. Learn all about Amazon Web Services Tools, Services, and Certifications.
Skyscanner/whispers
Identify hardcoded secrets in static structured text
buttercup/buttercup-core
:tophat: The mighty NodeJS password vault
trufflesecurity/driftwood
Private key usage verification
Acceis/leakScraper
LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
JoelGMSec/LeakSearch
Search & Parse Password Leaks
SAP/credential-digger
A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:
w3c/vc-data-model
W3C Verifiable Credentials v2.0 Specification
Dviros/CredsLeaker
Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
khoih-prog/ESPAsync_WiFiManager
This is an ESP32 (including ESP32-S2 and ESP32-C3) / ESP8266 WiFi Connection Manager, using ESPAsyncWebServer, with fallback web configuration portal. Use this library for configuring ESP32, ESP8266 modules' WiFi, etc. Credentials at runtime. You can also specify static DNS servers, personalized HostName, fixed or random AP WiFi channel. With examples supporting ArduinoJson 6.0.0+ as well as 5.13.5- . Using AsyncDNSServer instead of DNSServer now.
Ullaakut/RTSPAllTheThings
Deprecated RTSP media server -- Use github.com/aler9/rtsp-simple-server instead.
reugn/wifiqr
Create a QR code with your Wi-Fi login details
CCob/MirrorDump
Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory
PSKeePass/PoShKeePass
PowerShell module for KeePass
spaze/oprah-proxy
Generate credentials for Opera's "browser VPN"
twelvesec/passcat
Passwords Recovery Tool
JanisEst/KeePassBrowserImporter
KeePass 2.x plugin which imports credentials from various browsers.