Topics / #credentials

Credentials projects on GitHub

Detecting leaked credentials and secrets in code and repositories

As of , the most-starred Credentials projects on GitHub are trufflehog (28.6K stars), evilginx2 (15.7K stars) and routersploit (13.3K stars). GitHub.Locker tracks 8 Credentials repositories with 98.5K stars combined. The fastest-growing on October 17 was treg, with +95 stars in a day.

8Projects
98.5KStars in total
+115Stars in a day
Browse in the catalog →github.com/topics/credentials ↗

Hot right now

Most stars gained in a day · Oct 17

+95

treg

superdesigndev/treg · ★ 5.7K

Treg is OpenRouter for agent tools: one base URL and one token let an agent call 3,000+ catalogued endpoints across 60+ providers — SEO, enrichment, ads, scraping, image and video generation — plus your team's own keys, skills and CLIs.

+15

trufflehog

trufflesecurity/trufflehog · ★ 28.6K

TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

+3

evilginx2

kgretzky/evilginx2 · ★ 15.7K

Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

+1

routersploit

threat9/routersploit · ★ 13.3K

RouterSploit is an open-source exploitation framework built specifically for testing the security of embedded devices like routers.

The all-time top

8 projects · by stars

  1. #1 · trufflesecurity/trufflehog

    trufflehog

    TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

    28.6K
  2. #2 · kgretzky/evilginx2

    evilginx2

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

    15.7K
  3. #3 · threat9/routersploit

    routersploit

    RouterSploit is an open-source exploitation framework built specifically for testing the security of embedded devices like routers.

    13.3K
  1. 4

    PowerSploit

    13.1KPowerShellMafia/PowerSploit · PowerShell

    PowerSploit is a collection of PowerShell modules that penetration testers use during all phases of an assessment, covering code execution, persistence, privilege escalation, credential theft, exfiltration and reconnaissance on Windows systems.

  2. 5

    LaZagne

    11KAlessandroZ/LaZagne · Python

    LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).

  3. 6

    Red-Teaming-Toolkit

    10.8Kinfosecn1nja/Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

  4. 7

    treg

    5.7Ksuperdesigndev/treg · Python

    Treg is OpenRouter for agent tools: one base URL and one token let an agent call 3,000+ catalogued endpoints across 60+ providers — SEO, enrichment, ads, scraping, image and video generation — plus your team's own keys, skills and CLIs.

  5. 8

    github-farm

    354d4ncboz/github-farm · Python

    It is an automation framework that farms GitHub OAuth signup bonuses across multiple AI-gateway platforms (Tabi AI, GoRouter, CodeBuddy Global) by generating email aliases, catching their OTP codes over IMAP, and harvesting the resulting OAuth sessions.

Often tagged together