The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 23 Credential Open-Source Projects
-
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
Passbolt
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
-
Ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
-
ggshield
Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.
-
noseyparker
Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
-
elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
-
chameleon
19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap) (by qeeqbox)
-
honeypots
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
-
AWS-Guide
Amazon Web Services (AWS) Guide. Learn all about Amazon Web Services Tools, Services, and Certifications.
-
-
deadshot
Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository
-
windows-Credential-Provider-library
This repository will be updated with all the examples and links that I can find with relevant knowledge & information about CP in MS Windows vista up to version 10.
-
-
-
blockchain-certificates
Used to create, issue, revoke, or validate certificates (or any other PDF file) on the public Bitcoin blockchain.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Project mention: Seeking help to identify vulnerabilities and secrets in a website backup file | /r/HowToHack | 2023-07-03Trufflehog
Undying fondness for aws-vault to securely cache my session credentials.
Passbolt - Open Source Alternative to 1Password
disclosure: I work at Ockam.
The Portals for Mac app is an example of the type of thing you could build using the open source stack of protocols. The README (linked by parent) links out to all of the relevant parts of the protocol documentation to explain how these work together. The NAT Traversal (https://github.com/build-trust/ockam/blob/develop/examples/a...) part of the README is probably the best explanation of why the free relay you get via Ockam Orchestrator is a useful part of this demo.
As for why would anyone trust this: The protocols are designed so you absolutely don't have to trust the relay. Trust is pushed out to the edges that you control and so you're not susceptible to a MITM attack if something like a relay is compromised. The protocol design for all of this is open and documented, and was independently audited by (IMO) some of the best in the business, Trail of Bits: https://docs.ockam.io/reference/protocols.
Project mention: Magika: AI powered fast and efficient file type identification | news.ycombinator.com | 2024-02-15Yes!
Sometimes a file has no extension. Other times the extension is a lie. Still other times, you may be dealing with an unnamed bytestring and wish to know what kind of content it is.
This last case happens quite a lot in Nosey Parker [1], a detector of secrets in textual data. There, it is possible to come across unnamed files in Git history, and it would be useful to the user to still indicate what type of file it seems to be.
I added file type detection based on libmagic to Nosey Parker a while back, but it's not compiled in by default because libmagic is slow and complicates the build process. Also, libmagic is implemented as a large C library whose primary job is parsing, which makes the security side of me jittery.
I will likely add enabled-by-default filetype detection to Nosey Parker using Magika's ONNX model.
[1] https://github.com/praetorian-inc/noseyparker
Project mention: Ask HN: How do you manage many profiles and credentials for cloud tooling? | news.ycombinator.com | 2023-10-03You're going to love https://granted.dev. It can be extended further, as we've done internally: https://www.duckbillgroup.com/blog/overhauling-aws-account-a...
Project mention: how did he do it , like for example to crack a wifi pass you need to capture a handshake first then only you can use a dictionary attack . i really wanna know how he did it? | /r/MrRobot | 2023-05-26
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Credentials related posts
- Magika: AI powered fast and efficient file type identification
- GitHub: Can no longer search code without being logged in
- Ask HN: How do you manage many profiles and credentials for cloud tooling?
- Seeking help to identify vulnerabilities and secrets in a website backup file
- A CLI app that keeps your passwords encrypted and lets you manage them using a single secret
- Granted
- Introducing DeepSecrets: a better appsec tool for secrets scanning
-
A note from our sponsor - WorkOS
workos.com | 29 Apr 2024
Index
What are some of the best open-source Credential projects? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | trufflehog | 13,907 |
| 2 | aws-vault | 8,141 |
| 3 | Passbolt | 4,376 |
| 4 | Ockam | 4,352 |
| 5 | ggshield | 1,527 |
| 6 | noseyparker | 1,511 |
| 7 | envchain | 1,139 |
| 8 | granted | 888 |
| 9 | elpscrk | 726 |
| 10 | chameleon | 638 |
| 11 | honeypots | 585 |
| 12 | mXtract | 572 |
| 13 | credential-plus | 532 |
| 14 | AWS-Guide | 470 |
| 15 | buttercup-core | 461 |
| 16 | aws-sso-cli | 394 |
| 17 | wifiqr | 251 |
| 18 | deadshot | 188 |
| 19 | windows-Credential-Provider-library | 178 |
| 20 | cfn-secret-provider | 142 |
| 21 | setup-git-credentials | 82 |
| 22 | secret-service | 79 |
| 23 | blockchain-certificates | 65 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com