Skip to content
/ npad Public

WebAPP (pastebin) to share, exchange and analyze secrets, keys, certificates and code in a secure way (app/lib/api)

License

Notifications You must be signed in to change notification settings

paepckehh/npad

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

OVERVIEW

Go Reference Go Report Card Go Build

paepcke.de/npad

WebAPP to share, exchange and analyze secrets, keys, certificates and code in a secure way.

KEYPOINTS

  • Frontend: 100 % javascript free, small, fast
  • Backend: 100 % pure go code, no cgo, no db, minimal external dependencies, secure storage

Transport

  • No legacy TLS downgrade support
  • mutualTLS authentication (optional) removes large area of the golang application & tls stack attac surface

Storage

  • No disk access at all, everything is compressed and encrypted in-memory (ram)
  • No accesslogs, no db, total stateless server
  • No server side decryption key storage or knowledege at all
  • Any type fs storage is pure optional

Executable

  • Chroots, drops privs, small resource footprint
  • Minimlal startpage less than < 3kb, all UX elements embedded

Configuration

  • BUILD TIME CONFIGURATION ONLY! Type safe configuration only!
  • No unsafe runtime config files, commandline options or file parser!
  • Details configuration: see server.go
  • Example configuration: see APP/npad/main.go

Anything else?

  • Yes, its an quick hack,
  • No pre-build release binaries, build-time-configuration-only!

DOCS

pkg.go.dev/paepcke.de/npad

CONTRIBUTION

Yes, Please! PRs Welcome!

About

WebAPP (pastebin) to share, exchange and analyze secrets, keys, certificates and code in a secure way (app/lib/api)

Topics

Resources

License

Security policy

Stars

Watchers

Forks

Packages

No packages published

Languages