SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
ALL IN ONE Hacking Tool For Hackers
KeePassXC is a cross-platform community-driven port of the Windows application โKeePass Password Safeโ.
World's fastest and most advanced password recovery utility
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
๐งโ๐ Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
Bitwarden mobile apps (Password Manager and Authenticator) for Android.
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
The slightly more awesome standard unix password manager for teams
A native macOS KeePass client
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password ๐ก๏ธ
Password manager app for Android
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
:key: stateless open source password manager
A place for creators and users of password managers to collaborate on resources to make password management better.
A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp.
Your web application for managing personal data.
Free and open-source PDF editor for Windows with a built-in PDF 2.0 engine. View, annotate, OCR, merge, split, crop, rotate, compare, edit text, draw, sign, fill forms, print, flatten, and open password-protected PDFs without a subscription.
Bitwarden-compatible server running on Cloudflare Workers
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
๐ Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Secure sharing of secrets, passwords and files
A compilation of sites with dumb password rules.
Typeshare is the ultimate tool for synchronizing your type definitions between Rust and other languages for seamless FFI.
Keep passwords and other sensitive information out of your chat logs and inboxes.
A modern, open source password manager for individuals and teams.
trzsz-ssh ( tssh ) is an ssh client designed as a drop-in replacement for the openssh client. It aims to provide complete compatibility with openssh, mirroring all its features, while also offering additional useful features. Such as login prompt, batch login, remember password, automated interaction, trzsz, zmodem(rz/sz), udp mode like mosh, etc.
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefoxโข, Waterfoxโข, Thunderbirdยฎ, SeaMonkeyยฎ) profiles
๐ Yet another collection of wordlists
๐ด Palmr. is an open-source file-sharing platform focused on privacy and security. It enables users to upload, manage, and share files with features like password protection, custom links, and access control without tracking or limitations. Designed for seamless and secure sharing, Palmr. is completely free.
KeePassXC Browser Extension
๐ค Identity and Access Management knowledge for cloud platforms
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
Node.js bindings for Argon2 hashing algorithm
๐ Lightweight utilities for string & array manipulation, image handling, safe JSON encoding/decoding, validation, slug or strong password generating etc.
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
Get a 1Password team account for free to support your open source initiatives!
Directory Services Internals (DSInternals) PowerShell Module and Framework
Collaborative Passwords Manager
Hashtopolis - distributed password cracking with Hashcat
Bruteforce database
A self-hosted solution to streamline and organize all aspects of your life.
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging & Monitoring Drupal WordPress Joomla Flash Magento PHP Plone WHMCS Atlassian Products malicious traffic Adult video script avs KVS Kernel Video Sharing Clip Bucket Tube sites Content Management Systems Social networks scripts backends proxy proxies PHP Python Porn sites xxx adult gaming networks servers sites forums vbulletin phpbb mybb smf simple machines forum xenforo web hosting video streaming buffering ldap upstream downstream download upload rtmp vod video over dl hls dash hds mss livestream drm mp4 mp3 swf css js html php python sex m3u zip rar archive compressed mitigation code source sourcecode chan 4chan 4chan.org 8chan.net 8ch 8ch.net infinite chan 8kun 8kun.net anonymous anon tor services .onion torproject.org nginx.org nginx.com openresty.org darknet dark net deepweb deep web darkweb dark web mirror vpn reddit reddit.com adobe flash hackthissite.org dreamhack hack hacked hacking hacker hackers hackerz hackz hacks code coding script scripting scripter source leaks leaked leaking cve vulnerability great firewall china america japan russia .gov government http1 http2 http3 quic q3 litespeedtech litespeed apache torrents torrent torrenting webtorrent bittorrent bitorrent bit-torrent cyberlocker cyberlockers cyber locker cyberbunker warez keygen key generator free irc internet relay chat peer-to-peer p2p cryptocurrency crypto bitcoin miner browser xmr monero coinhive coin hive coin-hive litecoin ethereum cpu cycles popads pop-ads advert advertisement networks banner ads protect ovh blazingfast.io amazon steampowered valve store.steampowered.com steamcommunity thepiratebay lulzsec antisec xhamster pornhub porn.com pornhub.com xhamster.com xvideos xvdideos.com xnxx xnxx.com popads popcash cpm ppc
Pass for iOS - an iOS client compatible with Pass command line application.
PHP Standard Library
Manage secrets with Bash and GnuPG symmetric encryption
Modern(-ish) password hashing for your software and your servers
:closed_lock_with_key: A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP)
One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.
Passkeys, FIDO2 and WebAuthn .NET library.
FIDO2 Conformant WebAuthn and Passkey backend library for golang
Web interface to change and reset password in an LDAP directory
โ๏ธ passwordless, anonymous SSH-powered pastebin with a human-friendly TUI and web UI