credentials

Find credentials all over the place

A vault for securely storing and accessing AWS credentials in development environments

Orchestrate end-to-end encryption, mutual authentication, key management, credential management & authorization policy enforcement — at scale.

Know the dangers of credential reuse attacks.

Detect secrets in source code, scan git repos, and use pre commit hooks to prevent API key leaks.

Environment variables meet macOS Keychain and gnome-keyring <3

🔑 Free Offline Password Manager

Credentials gathering tool automating remote procdump and parse of lsass process.

mXtract - Memory Extractor & Analyzer

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

🔒Unified API for password hashing algorithms

Crawler (Bot) searching for credential leaks on paste sites.

🎩 The mighty NodeJS password vault

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

Identify hardcoded secrets in static structured text

The easiest way to access your cloud.

Private key usage verification

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

Deprecated RTSP media server -- Use github.com/aler9/rtsp-simple-server instead.