credentials

Find, verify, and analyze leaked credentials

A vault for securely storing and accessing AWS credentials in development environments

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

Know the dangers of credential reuse attacks.

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Find leaked secrets everywhere.

The easiest way to access AWS.

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Environment variables meet macOS Keychain and gnome-keyring <3

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

🔑 Free Offline-first Password Manager

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

Crawler (Bot) searching for credential leaks on paste sites.

Credentials gathering tool automating remote procdump and parse of lsass process.

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.