All repos — GH Trending Explorer

Yuki: a text-only Galgame reading companion; source backup without models, credentials or local data

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Remove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and agent skill for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.

superdesigndev / treg

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

GitGuardian / ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

AhmadHassan-BTed / ShopifyAutoAuth

Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.

django-hijack / django-hijack

With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.

ShutdownRepo / pywhisker

Python version of the C# tool for "Shadow Credentials" attacks

VibeTensor / attestix

AI agent identity, signed credentials, delegated authority and portable governance evidence. Python core and offline verifier SDKs.

Voyz / ibeam

IBeam is an authentication and maintenance tool used for the Interactive Brokers Client Portal Web API Gateway.

rndinfosecguy / Scavenger

Crawler (Bot) searching for credential leaks on paste sites.

ironicbadger / infra

99.7% less leaked credentials

Snaplii-Inc / agent-to-merchant-payments

Payments are broken for AI agents. Snaplii provides a secure, tokenized payment layer that enables AI agents to transact in the real world — without exposing users' underlying payment credentials.

ADScanPro / adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

zblurx / dploot

DPAPI looting in Python

fulldiagnose / antigravity-fixer

Fix Antigravity 'not eligible' error - diagnose, clean credentials, auto-fix

devZero-Security / redStackPRO

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.

ynsmroztas / KeySniper

**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.

crypt0p3g / adnullenum

One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.

VanTaS15 / RotationLedger

Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.

iffiX / neutrino

A mini developer hub for your network access, credentials, machines, AI, storage, and remote workflow.

haidrrrry / claude-watermark-remover

Remove AI watermarks and provenance metadata from text, images and documents. Strips invisible Unicode, C2PA Content Credentials, EXIF/XMP and generator tags from 30+ AI tools. Runs locally, no API key.