86 Open Source Credentials Software Projects

A vault for securely storing and accessing AWS credentials in development environments

Know the dangers of credential reuse attacks.

Environment variables meet macOS Keychain and gnome-keyring <3

Credentials gathering tool automating remote procdump and parse of lsass process.

mXtract - Memory Extractor & Analyzer

🔒Unified API for password hashing algorithms

🔑 Free Offline Password Manager

:tophat: The mighty NodeJS password vault

Crawler (Bot) searching for credential leaks on paste sites.

Deprecated RTSP media server -- Use github.com/aler9/rtsp-simple-server instead.

Generate credentials for Opera's "browser VPN"

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

PowerShell module for KeePass

Passwords Recovery Tool

KeePass 2.x plugin which imports credentials from various browsers.

A CloudFormation custom resource provider for deploying secrets and keys

DLL Password Filter Implant with Exfiltration Capabilities

Security-oriented protobuf-like serialization format with "Merkleized" content hashing support

A command-line interface to HashiCorp's Vault

This repository will be updated with all the examples and links that I can find with relevant knowledge & information about CP in MS Windows vista up to version 10.

Provides Jenkins with extension points to securely store, manage, and bind credentials data to other Jenkins plugins, builds, pipelines, etc.

awsenv is intended as a local credential store for people using more than one AWS account at the same time

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

Macaroons: bearer credentials with caveats for distributed authorization

Go wrapper around the Windows Credential Manager API functions

A cryptographically verifiable access control and directory system for Linux servers

Used to create, issue, revoke, or validate certificates (or any other PDF file) on the public Bitcoin blockchain.

A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.

AWS Secrets Manager Credentials Provider for Jenkins

Encrypted & plain text credentials for multiple environments

CredsStealer allows an attacker to craft a highly convincing credentials prompt using Windows PromptForCredential, validate it against the DC or localmachine and in turn leak it via an HTTP request.

Credentials provider that allows storing credentials in Kubernetes

A Serverless 1.x plugin to manage environment variables with YAML and turn them into a .env file on deployment. Supports encryption with KMS, multiple stages and custom profiles.

Coconut: Threshold Issuance Selective Disclosure Credentials with Applications to Distributed Ledgers.

Command Line tool for AWS SSO Credentials

@Hashicorp Vault Token Helper for macOS, Linux and Windows with support for secure token storage and multiple Vault servers 🔐

A simple, server/less, single-api, multi-backend, ghostly secret-store/key-store for your passwords, ssh-keys and cloud credentials. Ghost isn't real, it's just in your head.

ISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial environments. This repo is a mirror of https://gitlab.com/d0ubl3g/industrial-security-auditing-framework.

GitHub action to clone private respositories.

Git Repo and Filesystem credential scanner

A wrapping script to query the default password list maintained by cirn.net... << Thank them.

CyberArk Enterprise Password Vault API CLI tool

Set of small tools for managing AES encrypted credentials for powershell scripts

a storage less password manager

Firefox WebExtension to submit HTTP basic auth credentials automatically.

CLI for the AWS Federation Proxy

A python server tool based on flask , this tool can phish some Facebook credentials!

Extract credentials and other useful info from network captures

ProjectPad allows to manage secret credentials and server information that you need to handle as a software developer.

One Identity Safeguard PowerShell scripting resources

port scanner & login credential tester

Node.js package for storing application credentials (API keys, database passwords, etc.) encrypted in your repository.

GitHub Action for setting up git credentials

This is an ESP32 (including ESP32-S2 and ESP32-C3) / ESP8266 WiFi Connection Manager, using ESPAsyncWebServer, with fallback web configuration portal. Use this library for configuring ESP32, ESP8266 modules' WiFi, etc. Credentials at runtime. You can also specify static DNS servers, personalized HostName, fixed or random AP WiFi channel. With examples supporting ArduinoJson 6.0.0+ as well as 5.13.5- .

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

Identify hardcoded secrets in static structured text

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

Create a QR code with your Wi-Fi login details

23 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, ntp, memcache, snmp, and oracle)

Detect secrets in your request/response using secretlint.

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to login on IMAP servers.

Service to keep secrets of applications

A magic shim for Docker credential helpers 🪄

CLI & library to search for default credentials among thousands of Products / Vendors

Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets

replaces the credentials for MFA in AWS

Searching the TrashPanda OSINT bot API to check if your email/domain or password was leaked or not

Invoke-KleptoKitty - Deploys Payloads and collects credentials

Chromiux is a python based console app that extracts the encrypted saved passwords/cookies in txt format of chrome browser.

A simple Python tool to get short-term access tokens for CLI/Boto3 operations when using AWS SSO

git account manager.

Library using AsyncWebServer to configure MultiWiFi/Credentials at runtime for ESP32 (including ESP32-S2 and ESP32-C3) and ESP8266 boards. You can also specify DHCP HostName, static AP and STA IP. Use much less memory compared to full-fledge WiFiManager. Config Portal will be auto-adjusted to match the number of dynamic custom parameters. Optional default Credentials to be autoloaded into Config Portal to use or change instead of manually input. Credentials are saved in LittleFS, SPIFFS or EEPROM. New powerful-yet-simple-to-use feature to enable adding dynamic custom parameters from sketch and input using the same Config Portal. Double or MultiDetectDetector as well as Virtual Switches feature permits entering Config Portal as requested.

AWS CLI extension for Visual Studio Code

Private key usage verification

A database for storing, querying and doing stats on credential leaks

Helper scripts and workflows around the PlanetScale CLI to automate database branch creation/merging/update directly out of your pull/merge request.

This .NET library simplifies client credentials access token requests with an access token client that can be reused for all your services. It also provides the ability to cache access tokens for improved performance.

Automated lifecycle management for credentials

Rotate your Application Secret on an active cluster of Play app servers