Credentials Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

557K 2K 194

trufflehog

Find, verify, and analyze leaked credentials

169K 26K 2K

ghost

A simple, server/less, single-api, multi-backend, ghostly secret-store/key-store for your passwords, ssh-keys and cloud credentials. Ghost isn't real, it's just in your head.

60K 42 26

pepperize-cdk-ses-smtp-credentials

Generate SES smtp credentials for a given user and store the credentials in a SecretsManager Secret.

35K 18 7

rds-proxy-password-rotation

Python script to rotate the RDS credentials using a separate credential for the application.

28K 0 0

whispers

Identify hardcoded secrets in static structured text (version 2)

22K 98 11

boto3-refresh-session

A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.

11K 50 4

click-creds

Pluggable credentials storage and management for click CLI apps

8K 4 3

credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

6K 201 48

dbeaver-creds

Decrypt DBeaver's credentials-config.json file and display the output (a JSON string).

5K 33 3

kingfisher-bin

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 900+ rules.

5K 1K 97

afp-cli

CLI for the AWS Federation Proxy

4K 13 8

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

2K 969 137

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

2K 671 55