omiki1 / YukiAI
Yuki: a text-only Galgame reading companion; source backup without models, credentials or local data
omiki1 / YukiAI
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
passbolt / passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
wiltodelta / remove-ai-watermarks
Remove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and agent skill for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.
superdesigndev / treg
OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
aws-actions / configure-aws-credentials
Configure AWS credential environment variables for use in other GitHub Actions.
awslabs / amazon-ecr-credential-helper
Automatically gets credentials for Amazon ECR on docker push/docker pull
x90skysn3k / brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
kubernetes-sigs / aws-iam-authenticator
A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster
betterleaks / betterleaks
Find leaked secrets everywhere.
xmanrui / dsh-im
通过扫码或机器人凭据把IM机器人接入DeepSeek Harness（支持飞书、微信、钉钉、企业微信、QQ、Slack、Telegram、Discord和WhatsApp）。 Connect IM bots to DeepSeek Harness via QR code or credentials (9 channels).
GitGuardian / ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
nymtech / nym
Nym provides strong network-level privacy against sophisticated end-to-end attackers, and anonymous transactions using blinded, re-randomizable, decentralized credentials.
AhmadHassan-BTed / ShopifyAutoAuth
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
django-hijack / django-hijack
With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.
nikaiw / VMkatz
Extract Windows credentials directly from VM memory snapshots and virtual disks
sidebase / nuxt-auth
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
w3c / webauthn
Web Authentication: An API for accessing Public Key Credentials
docker / docker-credential-helpers
Programs to keep Docker login credentials safe by storing in platform keystores
griffinmartin / opencode-claude-auth
OpenCode 2 plugin that uses your existing Claude Code credentials — no separate login needed.
mongodb / kingfisher
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
apify / mcpc
The most compatible MCP CLI client. Supports: tools, resources, prompts, completions, async tasks, skills, stdio and Streamable HTTP (MCP 2026-07-28 and 2025-11-25). Persistent sessions, OAuth 2.1 with DCR, CIMD, client credentials, and ID-JAG, OS keychain, --json for code mode, grep across servers, proxy for AI sandboxes, x402 & more.
fwdai / rowel
🔑 Local-first Secrets Manager
microsoft / artifacts-credprovider
The Azure Artifacts Credential Provider enables dotnet, NuGet.exe, and MSBuild to interactively acquire credentials for Azure Artifacts feeds.
ShutdownRepo / pywhisker
Python version of the C# tool for "Shadow Credentials" attacks
VibeTensor / attestix
AI agent identity, signed credentials, delegated authority and portable governance evidence. Python core and offline verifier SDKs.
stripe / link-cli
Let your agents spend on your behalf. Your payment credentials are never exposed. You approve every purchase.
Voyz / ibeam
IBeam is an authentication and maintenance tool used for the Interactive Brokers Client Portal Web API Gateway.
rndinfosecguy / Scavenger
Crawler (Bot) searching for credential leaks on paste sites.
ironicbadger / infra
99.7% less leaked credentials
Snaplii-Inc / agent-to-merchant-payments
Payments are broken for AI agents. Snaplii provides a secure, tokenized payment layer that enables AI agents to transact in the real world — without exposing users' underlying payment credentials.
AdRoll / hologram
Easy, painless AWS credentials on developer laptops.
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
aws / aws-workload-credentials-provider
The AWS Workload Credentials Provider (formerly the AWS Secrets Manager Agent) is a client-side solution that helps you standardize how you consume credentials from AWS services across your compute environments.
synfinatic / aws-sso-cli
A powerful tool for using AWS Identity Center for the CLI and web console.
sandbaseai / sandbase-harness
Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.
linux-credentials / libwebauthn
FIDO2 (WebAuthn) and FIDO U2F platform library for Linux written in Rust
zblurx / dploot
DPAPI looting in Python
devopness / devopness
Devopness: AI DevOps on your cloud. Deploy apps, infra and CI/CD. Any cloud and any stack, one MCP. Deterministic API, opinionated and fully configurable. No cloud credentials in AI chats. Free plan.
decentralized-identity / veramo
A JavaScript Framework for Verifiable Data
fulldiagnose / antigravity-fixer
Fix Antigravity 'not eligible' error - diagnose, clean credentials, auto-fix
zh667 / TokenLedger
Relay-site attributed token usage for DeepSeek Harness — zero config, no credentials
devZero-Security / redStackPRO
A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.
stephrobert / feint
A local emulator of the Scaleway, Outscale and Exoscale APIs. Their own official CLIs drive it end to end, Terraform and OpenTofu drive two of the three — no cloud account, no cloud credentials, nothing billed.
ynsmroztas / KeySniper
**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.
crypt0p3g / adnullenum
One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.
JUANWANG-BUAA / dsh-full-remote
Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/directory support.
VanTaS15 / RotationLedger
Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.
iffiX / neutrino
A mini developer hub for your network access, credentials, machines, AI, storage, and remote workflow.
botiverse / antiproton
Durable, multi-tenant runtime for agents that act on real systems — credentials never enter the model's context
ruvnet / ai-text-watermark
Invisible, key-verifiable watermarks for AI/LLM-generated text — SynthID-Text-style, in Rust + WebAssembly (Node + browser). Live playground included.
haidrrrry / claude-watermark-remover
Remove AI watermarks and provenance metadata from text, images and documents. Strips invisible Unicode, C2PA Content Credentials, EXIF/XMP and generator tags from 30+ AI tools. Runs locally, no API key.
cumakurt / hara
Browser-native isolated Hara OS (32-bit) environment. Open hara.html, boot a real Linux userspace, and work in a terminal. The guest cannot see the host filesystem, processes, or credentials.
nateships / rolle
Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools.
minervacomputing / harness
Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.