CredsHunter

Read-only credential discovery toolkit for finding reusable secrets during authorized pentests.

Desktopfree

CredsHunter is an open-source, read-only credential discovery toolkit for authorized internal penetration testing and post-exploitation. It searches Linux and Windows hosts for realistically reusable secrets — plaintext passwords, connection strings, private keys, and similar artifacts — while deliberately staying read-only and network-silent. It is aimed at penetration testers and red teamers, and does not target cloud or SaaS access tokens.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of CredsHunter - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim CredsHunter to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether CredsHunter (or something else) actually fits.

Try a problem