Search Results for "keys"

truffleHog searches through git repositories for high entropy strings and secrets, digging deep into commit history. TruffleHog runs behind the scenes to scan your environment for secrets like private keys and credentials, so you can protect your data before a breach occurs. Secrets can be found anywhere, so TruffleHog scans more than just code repositories, including SaaS and internally hosted software. With support for custom integrations and new integrations added all the time, you can secure your secrets across your entire environment. ...

...Never lose track of file hierarchy while you search. Broot tries to select the most relevant file. You can still go from one match to another one using tab or arrow keys. You may also search with a regular expression. To do this, add a / before the pattern. You may also apply logical operators or combine patterns, for example searching test in all files except json ones could be !/json$/&c/test and searching carg both in file names and file contents would be carg|c/carg.

Pocket-ID is an open-source OpenID Connect (OIDC) identity provider that prioritizes passwordless authentication using modern passkeys, making secure login easier for self-hosted services. By supporting passkeys instead of traditional passwords, Pocket-ID aligns with evolving web authentication standards, letting users sign in with devices, hardware keys like YubiKey, or platform-managed credentials. It’s designed to be simpler to install and use than larger identity solutions like Keycloak or Hydra and integrates smoothly with other self-hosted applications that understand OIDC protocols. With Docker-ready setup and broad community interest, the project supports a fully self-managed authentication stack where you control user identity, sessions, and login flows without relying on third-party services. ...

Ockam is a suite of open source tools, programming libraries, and managed cloud services to orchestrate end-to-end encryption, mutual authentication, key management, credential management, and authorization policy enforcement – at massive scale. Modern applications are distributed and have an unwieldy number of interconnections that must trustfully exchange data. To build trust for data-in-motion, applications need end-to-end guarantees of data authenticity, integrity, and confidentiality....

...The app generates time-based one-time passwords (TOTP) and counter-based one-time passwords (HOTP) that are widely required for logging into services with enhanced security, and it lets users scan QR codes or manually enter secret keys to register new accounts. Designed with native iOS conventions, it supports Face ID and Touch ID to quickly unlock the app while keeping authentication secrets encrypted locally on the device, so sensitive data never leaves the user’s control. The client is also structured to work offline, meaning you can generate codes without a network connection, and it integrates with companion browser extensions or other 2FAS sync tools so tokens can be backed up or restored across devices securely.

The LDAP proxy is designed to be the part of the email encryption infrastructure which would simplify finding and using public encryption keys contained in X.509 public certificates.

This module provides single sign-on behavior. The user types a passphrase when logging in and is allowed in if it decrypts the user's SSH private key. An ssh-agent is started and keys are added. For the entire session, the user types no more passwords.

privacyIDEA is a management and authentication system for two factor authentication. You can use OTP tokens, OTP cards, SMS, Smartphone Apps to incorparte the second factor. It can even manage SSH keys and supports Offline OTP. The latest version can manage and enroll user certificates. Its modular design makes it easily enhancable. It runs on Linux. Applications and workflows can be connected to privacyIDEA hence enabling two factor authentication in your system logon, web applications, SSL VPNs, firewalls and many more. ...

SSH Access Manager is a comprehensive access security management platform that permits IT professionals to easily establish and maintain an enterprise-wide SSH access security solution from a central location. It enables a team of system administrators to centrally manage and deploy ssh keys. This app is intended to be used in rather large environnements where access to unix accounts are handled with ssh keys. SSH Access Manager allows you to maintain user public keys. You can organise these keys with group of keys called keyring. Then SSH Access Manager will deploy the keys and/or keyrings to specified unix accounts / groups / servers. ...

OrgLDAP is an extensible LDAP user management application supporting groups, *NIX (POSIX, Shadow), Samba and other account types, SSH public keys and sudo roles. It includes a reusable extensible library and a web-based front-end.

Key Manager is designed to allow distribution and management of SSH keys in a way that scales beyond manually copying public keys to remote hosts. This approaches Single-Sign-On functionality, if limited to ssh access from a single host.

You could be doing a better job of website security... If only there was a simple way to implement SSL with signed keys? PHP-CA is an easy to use and easy to administer Certificate Authority that runs in PHP.

PAM module which will authenticate user by X509 certificates. Keys must be provided in some automountable location. As storage may be used usb steaks, bluetooth storage devices... Mainly intended for password-less authentication on single user clients pc

This small project fills a need for network administrators to centralize their SSH keys management. It allows to manage a database of public keys via a GUI (and an upcoming command line interface), dinamically enabiling on a per-key, per-user and per-host

Smartcard key storage daemon is an application for storing transparently keys for cryptographic applications on smartcards. (ie. GnuPG or OpenSSH)