All projects
Repositories in this selection 44 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Kkeepassxreboot / keepassxcCross-platform password manager derived from the KeePass ecosystem.C++NOASSERTION · Restricted / unknownInsufficient rank history29,7122,003——2026-11-02
2—Hhashcat / hashcatAuthor description: World's fastest and most advanced password recovery utilityCUnknown · Restricted / unknownInsufficient rank history27,2453,606——2026-11-03
3—Ssupertokens / supertokens-coreOpen source alternative to Auth0 / Firebase Auth / AWS CognitoJavaNOASSERTION · Restricted / unknownInsufficient rank history15,340788——2026-11-02
4—Llogto-io / logto🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.TypeScriptMPL-2.0 · Share derivative sourceInsufficient rank history14,8371,212——2026-11-02
5—Oopenwall / johnJohn the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAsCNOASSERTION · Restricted / unknownInsufficient rank history13,8582,565——2026-11-02
6—Kkeeweb / keewebFree cross-platform password manager compatible with KeePassHTMLNOASSERTION · Restricted / unknownInsufficient rank history13,0331,168——2026-05-08
7—Bberzerk0 / Probable-WordlistsVersion 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!UnknownCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history9,3861,607——2023-10-04
8—TTheKingOfDuck / fuzzDictsYou Know, For WEB Fuzzing !PythonUnknown · Restricted / unknownInsufficient rank history8,4472,464——2023-11-13
9—Rrobinmoisson / staticryptPassword protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.HTMLMIT · PermissiveInsufficient rank history8,065499——2026-07-06
10—MMacPass / MacPassA native macOS KeePass clientObjective-CNOASSERTION · Restricted / unknownInsufficient rank history6,895475——2026-10-29
11—MMebus / cuppCommon User Passwords Profiler (CUPP)PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,6162,421——2026-07-17
12—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
13—Ppassbolt / passbolt_apiThe JSON API service for Passbolt Community Edition, a team password manager.PHPAGPL-3.0 · Share derivative sourceInsufficient rank history6,204406——2026-10-20
14—Llesspass / lesspass:key: stateless open source password managerTypeScriptGPL-3.0 · Share derivative sourceInsufficient rank history6,077360——2026-10-21
15—Kkhast3x / h8mailEmail OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related emailPythonNOASSERTION · Restricted / unknownInsufficient rank history5,369622——2023-08-15
16—Kk8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · PermissiveInsufficient rank history5,340882——2025-03-24
17—Sshuaiplus / nodewardenBitwarden-compatible server running on Cloudflare WorkersTypeScriptNOASSERTION · Restricted / unknownInsufficient rank history4,0914,656——2026-10-22
18—Ddeepfence / SecretScanner:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:GoMIT · PermissiveInsufficient rank history3,398344——2026-03-07
19—Ppglombardo / PasswordPusher🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.RubyApache-2.0 · PermissiveInsufficient rank history3,241478——2026-11-02
20—Rranisalt / node-argon2Node.js bindings for Argon2 hashing algorithmJavaScriptMIT · PermissiveInsufficient rank history2,193103——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.