Credentials Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

trufflehog

Find, verify, and analyze leaked credentials

rds-proxy-password-rotation

Python script to rotate the RDS credentials using a separate credential for the application.

whispers

Identify hardcoded secrets in static structured text (version 2)

dbeaver-creds

Decrypt DBeaver's credentials-config.json file and display the output (a JSON string).

boto3-refresh-session

A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.

click-creds

Pluggable credentials storage and management for click CLI apps

pepperize-cdk-ses-smtp-credentials

Generate SES smtp credentials for a given user and store the credentials in a SecretsManager Secret.

credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

afp-cli

CLI for the AWS Federation Proxy

kingfisher-bin

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 950+ rules.

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

creds

Creds is a library for managing Linux, FreeBSD and OpenBSD user accounts and credentials.

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

credentialdigger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

blockchain-certificates

Used to create, issue, revoke, or validate certificates (or any other PDF file) on the public Bitcoin blockchain.

coconut-lib

Threshold Issuance Selective Disclosure Credentials.

aws-session

A CLI to generate session credentials based on ~/.aws/config profiles and store them as profile in ~/.aws/credentials file

credslayer

Extract credentials and other useful info from network captures

aws-creds

Easily switch between AWS Credential profiles.

aws-google-saml

A user-browser driven SAML authentication tool for AWS

google-yubikey

Generate Google Service Account tokens with your YubiKey!

deepsecure

DeepSecure: Secure your AI agent and agentic AI application ecosystem with DeepSecure.

ghost

A simple, server/less, single-api, multi-backend, ghostly secret-store/key-store for your passwords, ssh-keys and cloud credentials. Ghost isn't real, it's just in your head.