Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
47,133 repositories indexed
25–48 of 1,198 · Most stars
Find, verify, and analyze leaked credentials
Authentication for the Web.
⚙️ NGINX config generator on steroids 💉
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
The authentication glue you need.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Flexible authentication solution for Rails with Warden.
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
SQL powered operating system instrumentation, monitoring, and analytics.
Simple and flexible tool for managing secrets
Simple, unobtrusive authentication for Node.js.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Main repo for hosting release binaries
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
The easiest, and most secure way to access and protect all of your infrastructure.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Loads environment variables from .env for nodejs projects.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Useful tool to track location or mobile number