AhmadHassan-BTed / ShopifyAutoAuth
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
AhmadHassan-BTed / ShopifyAutoAuth
superdesigndev / treg
A registry and proxy that gives agents one base URL and token to call a catalog of third-party tool endpoints, billed per call.
dengshuchen747-cmyk / Cityu-Credential-Chain
—
wiltodelta / remove-ai-watermarks
Remove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and agent skill for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.
omiki1 / YukiAI
Yuki: a text-only Galgame reading companion; source backup without models, credentials or local data
elementalsouls / Claude-OSINT
8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
haidrrrry / claude-watermark-remover
Remove AI watermarks and provenance metadata from text, images and documents. Strips invisible Unicode, C2PA Content Credentials, EXIF/XMP and generator tags from 30+ AI tools. Runs locally, no API key.
jonaslejon / malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
iffiX / neutrino
A mini developer hub for your network access, credentials, machines, AI, storage, and remote workflow.
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
GitGuardian / ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
django-hijack / django-hijack
With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.
ShutdownRepo / pywhisker
Python version of the C# tool for "Shadow Credentials" attacks
VibeTensor / attestix
AI agent identity, signed credentials, delegated authority and portable governance evidence. Python core and offline verifier SDKs.
Voyz / ibeam
IBeam is an authentication and maintenance tool used for the Interactive Brokers Client Portal Web API Gateway.
rndinfosecguy / Scavenger
Crawler (Bot) searching for credential leaks on paste sites.
ironicbadger / infra
99.7% less leaked credentials
Snaplii-Inc / agent-to-merchant-payments
Payments are broken for AI agents. Snaplii provides a secure, tokenized payment layer that enables AI agents to transact in the real world — without exposing users' underlying payment credentials.
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
dmdhrumilmistry / pyhtools
A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.
zblurx / dploot
DPAPI looting in Python
avansaber / seo-monster
SEOMonster: a local, user-credential-driven MCP server for SEO workflows over Google Search Console, GA4, PageSpeed Insights, and Cloudflare. Read-first, open source.
ImKKingshuk / LockKnife
LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.
fulldiagnose / antigravity-fixer
Fix Antigravity 'not eligible' error - diagnose, clean credentials, auto-fix
devZero-Security / redStackPRO
A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.
ynsmroztas / KeySniper
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
z15114664687-dot / hr-onboarding-agent
Open-source AI-assisted HR onboarding for Feishu/Lark: configurable workflows, document OCR and review, Bitable sync, reminders, and a zero-credential demo.
ripmilla / netwalk
Read-only network survey toolkit for AI coding agents: crawl a site from one device, diagnose it, draw it, and hand over a report — without ever changing a device or seeing a credential.
zack0x01 / XSS.pdf-Credential-Harvesting-PDF
A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS and credential-harvesting scenarios.
crypt0p3g / adnullenum
One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
VanTaS15 / RotationLedger
Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.