1.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
Ranked by Attention Score: stars gained over the last 90 complete days
10 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
Find, verify, and analyze leaked credentials
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
A vault for securely storing and accessing AWS credentials in development environments
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
🔑 Local-first Secrets Manager
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
Create a QR code with your Wi-Fi login details
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.