jedisct1/piknik
Piknik
Piknik is an encrypted clipboard relay and multiplexer that coordinates the sharing of text, binary data, and shell content across multiple network hosts. It utilizes a centralized relay architecture to manage secure client connections, providing an end-to-end encrypted system for synchronizing session state and data streams.
The project distinguishes itself through the use of multi-stage key derivation and API key access control to secure remote shell access. It employs end-to-end encryption and digital signatures to protect relayed content, ensuring that data is encrypted at the source before transmission to the hub.
The system covers cross-host clipboard sharing, including the transfer of compressed directory archives and real-time data streaming. It further provides shell content management for storing and retrieving terminal input, as well as system integration for detecting interactive terminal attachments and inspecting clipboard status via system signals.
Features
- Encrypted Clipboard Relays - Acts as a secure server and client system for sharing encrypted text and binary data across multiple hosts.
- Centralized Relay Architectures - Utilizes a centralized relay architecture to coordinate real-time data streams and session state across multiple network hosts.
- Clipboard Synchronization - Sends and retrieves text or binary data between multiple hosts using an encrypted central relay server.
- Clipboard Copying - Sends strings or file contents to a shared clipboard for use in other network sessions.
- Network Buffer Transfers - Copies text or binary data from standard input to a shared network buffer for retrieval on another host.
- Remote Clipboard Pasting - Retrieves previously stored content from the shared clipboard and inserts it into the current shell.
- Remote Clipboard Sharing - Copies and pastes text or binary data between different computers via an encrypted central relay server.
- Session Synchronization - Coordinates and shares terminal content and state across multiple active sessions on a network.
- Terminal Multiplexer Orchestrators - Implements a server listener that manages client connections and coordinates the sharing of shell content and streams.
- Secure File Transfer - Encrypts and signs all relayed content to ensure data integrity and prevent unauthorized access.
- Real-Time Data Streams - Pushes data from standard input to all connected listeners in real-time to synchronize state across active sessions.
- Encrypted Buffer Synchronization - Provides asynchronous retrieval of encrypted session content stored with signatures and timestamps on a remote server.
- API Access Restrictions - Enforces API key validation to restrict unauthorized client requests.
- Encrypted Session Management - Implements secure access to shared network buffers and data streams using API keys and password-derived encryption.
- Key Derivation Functions - Derives secure communication keys from passwords using a series of hashing steps to protect session access.
- End-to-End Encryption - Secures all relayed content by encrypting and signing data at the source before transmission to the hub.
- Stream Encryption and Decryption - Sends a live data stream from one host to multiple receivers simultaneously using end-to-end encryption.
- Password-Derived Key Generation - Derives secure communication keys from passwords using a multi-stage hashing process.
- Session Authentication - Verifies user identity and derives secure keys through multi-stage hashing to protect remote shell access.
- Session Synchronization - Coordinates the movement and retrieval of session data between connected clients through a centralized hub.
- Clipboard Archive Transfers - Packages directories into compressed archives and sends them to the shared clipboard for remote extraction.
- Secure Session Buffers - Saves encrypted session content with signatures and timestamps to ensure integrity during retrieval.
- Standard Output Stream Reception - Captures a data stream from a remote source and directs it to the standard output.
- Shell Data Streaming - Enables pushing live data from standard input to multiple connected listeners to synchronize state across active sessions.
- Concurrent Remote Session Managers - Coordinates the sharing and control of multiple simultaneous shell sessions across a network.
- Standard Stream Piping - Routes data from standard input to network sockets and from sockets to standard output for shell integration.
- Remote Shell Content Retrieval - Fetches stored content from a remote server and outputs the result directly to the terminal.
- Remote Shell Content Storage - Saves input content to a remote store for later retrieval by other active sessions.
- Static API Key Validation - Implements server-side resource access control through the validation of static API keys provided during client handshakes.
- Secure Terminal Content Stores - Provides a remote storage system for encrypted shell content featuring digital signatures and timestamps.
