Credentials Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

trufflehog

Find, verify, and analyze leaked credentials

ghost

A simple, server/less, single-api, multi-backend, ghostly secret-store/key-store for your passwords, ssh-keys and cloud credentials. Ghost isn't real, it's just in your head.

pepperize-cdk-ses-smtp-credentials

Generate SES smtp credentials for a given user and store the credentials in a SecretsManager Secret.

rds-proxy-password-rotation

Python script to rotate the RDS credentials using a separate credential for the application.

whispers

Identify hardcoded secrets in static structured text (version 2)

boto3-refresh-session

A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.

click-creds

Pluggable credentials storage and management for click CLI apps

credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

dbeaver-creds

Decrypt DBeaver's credentials-config.json file and display the output (a JSON string).

kingfisher-bin

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 900+ rules.

afp-cli

CLI for the AWS Federation Proxy

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

creds

Creds is a library for managing Linux, FreeBSD and OpenBSD user accounts and credentials.

credentialdigger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

coconut-lib

Coconut: Threshold Issuance Selective Disclosure Credentials with Applications to Distributed Ledgers.

blockchain-certificates

Used to create, issue, revoke, or validate certificates (or any other PDF file) on the public Bitcoin blockchain.

google-yubikey

Generate Google Service Account tokens with your YubiKey!

aws-session

A CLI to generate and store session credentials in ~/.aws/credentials file, based on ~/.aws/config profiles

credslayer

Extract credentials and other useful info from network captures

aws-creds

Makes it easier to use multiple AWS accounts when you don't have SSO available.

deepsecure

DeepSecure: Secure your AI agent and agentic AI application ecosystem with DeepSecure.

git-secret-scanner

Find secrets in git repositories with TruffleHog & Gitleaks