Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
77,353 visible repositories in the index
25–48 of 1,651 · Most stars
Find, verify, and analyze leaked credentials
Authentication for the Web.
⚙️ NGINX config generator on steroids 💉
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
The authentication glue you need.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
Flexible authentication solution for Rails with Warden.
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
SQL powered operating system instrumentation, monitoring, and analytics.
Simple and flexible tool for managing secrets
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Simple, unobtrusive authentication for Node.js.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Main repo for hosting release binaries
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
The easiest, and most secure way to access and protect all of your infrastructure.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Useful tool to track location or mobile number
Loads environment variables from .env for nodejs projects.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.