Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. macOS and Windows.
A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.
:key: stateless open source password manager
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
Collaborative Passwords Manager
Hashtopolis - distributed password cracking with Hashcat
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Secure sharing of secrets, passwords and files
A compilation of sites with dumb password rules.
Keep passwords and other sensitive information out of your chat logs and inboxes.
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
Directory Services Internals (DSInternals) PowerShell Module and Framework
:closed_lock_with_key: A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP)
ZipCracker是Hx0战队出品的一款功能强大的Zip密码破解工具。它集成了字典攻击、掩码攻击、短明文 CRC32 枚举恢复、已知明文攻击、套娃ZIP解压等多种破解模式,并能自动修复伪加密文件。凭借其高性能与多功能的特点,ZipCracker已成为CTF比赛中的一把利器。(ZipCracker by Hx0 team is a tool for cracking passwords on Zip files, great for CTF competitions.)
Share passwords securely
InternetTest is a modern connection utility for Windows. It can locate IP addresses, send ping request, recover your WiFi passwords and more!
Cross-platform library and utility to manage passwords
Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks and more!
A pluggable framework for adding two-factor authentication to Django using one-time passwords.
Python tool and library for decrypting and encrypting MS Office files using passwords or other keys
SCADA StrangeLove Default/Hardcoded Passwords List
End-to-end encrypted notes, tasks, files, passwords, journal and bookmarks. Keyed by a 12-word BIP-39 phrase: no email, no password, no account to leak. The full client source for web, desktop and mobile is published, along with the encryption (XChaCha20-Poly1305, HKDF-SHA256, Ed25519) and the threat model, so the privacy claims are falsifiable.
🐘 🔒 KeePass-compatible browser extension for filling passwords.
Platform-independent Qt API for storing passwords securely.
OpenKeylet — Local password and credential manager for AI agents via MCP. Use passwords, API keys, SSH, and TOTP while keeping hidden plaintext out of model context by default.
GTA 6 CyberLeak launcher 1.1.18 — Fast launch & Without passwords. Playable Leonida / Vice City. Canon GitHub only. gta6-fake-main-menu
Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks
Reverse engineering analysis of DarkTortilla RAT, a sophisticated malware that steals credit card data, decrypts browser passwords, and exfiltrates via Telegram, SMTP, and FTP.
Browser extension for the DeepSeek Harness desktop app. The model reads the page you are on as text with numbered controls and acts on it — click, type, scroll, navigate, manage tabs — and, when you switch image recognition on, looks at an image you point at. It asks before acting, keeps passwords in the page, and talks to your own desktop; the one
Keyboard-first Rust developer toolbox with a responsive Ratatui TUI and script-friendly CLI for encoding, parsing, hashing, text, time, JWT, regex, cron, UUID, passwords, and more. We don't tit around here.
使用大模型时,隐藏你的密码、token 等敏感信息。适配市面上各种工具,一键安装即可用。 / Hide passwords, tokens and secrets from the model. Works with everyday tools — one-click install.
Free client-side password and key generator for secure passwords, API keys, UUIDs, JWT secrets, and encryption keys. Powered by the Web Crypto API.
Password Generator — Generate cryptographically secure passwords, passphrases, PINs, API keys, and Wi-Fi passwords with an unbiased random number generator, real zxcvbn-based strength scoring, and multi-scenario crack-time estimates — all processed privately on your device, nothing ever stored. Free on ToolAdda.online.