encpass.sh
platform-compat
encpass.sh | platform-compat | |
---|---|---|
3 | 23 | |
587 | 249 | |
0.2% | - | |
0.0 | 1.2 | |
over 1 year ago | over 3 years ago | |
Shell | C# | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
encpass.sh
-
Could someone review this PKGBUILD that I'm going to submit to the AUR?
https://github.com/plyint/encpass.sh/archive/v${pkgver}/${pkgname}-${pkgver}.tar.gz
-
How to Handle Secrets on the Command Line
The difficulties mentioned in the article with passing secrets on the command line is one of the reasons why we wrote encpass.sh (https://github.com/plyint/encpass.sh). We had a similar need for a lightweight solution for managing secrets for simple shell scripts on our local workstations and in restricted environments. Bonus, it can be easily customized with extension scripts to adapt functions for your own specific needs. See our keybase extension for an example -> https://github.com/plyint/encpass.sh/blob/master/extensions/...
-
Pass: The standard Unix password manager
We made an extension for encpass.sh that stores secrets in Keybase (https://github.com/plyint/encpass.sh/blob/master/extensions/...) if that sort of thing is of interest to you. Outside of personal secrets, it can be used as a sort of low cost stand in for shared secrets that you might use something like Vault for in a team environment.
platform-compat
-
KeePass flaw allows retrieval of master password
DotNet offers the SecureString class to keep a string encrypted in Memory, but as long as the OS does not natively support this concept, the only advantage is that it resides in memory for a shorter time, the disadvantage is that SecureStrings are easier to search for.
- System.Net.Mail.SmtpClient is not recommended anymore; what is the alternative?
-
Bitwarden PINs can be brute-forced
Note the KeePass's resistance to the attack mentioned depends on the security of .NET's secure string, which, here's what Microsoft has to say about it (https://github.com/dotnet/platform-compat/blob/master/docs/D...)
As for KeePassXC, last I checked it didn't even bother.
-
Ever Find A Dead Man's Switch On A Network/Domain?
TIL. Looks like the deprecation note recommends MailKit.
-
Disabilities and Windows Passwords
Well of course, but it does have to be passed to the module that generates the hashes AD uses in the first place. And as I said, the standard password reset screen is bound to store the password in plain text somewhere as well.
-
Embedded logo in HTML email sent from PowerShell
This won’t help you with your question, but I figured I should warn against using send-mailmessage.
-
Alternative to PowerShell cmdlet 'send-mailmessage'
points you here.
-
API pagination help?
Some of the reasons for not using Hashtable or other non-generic collection types are outlined here. That's why Microsoft doesn't recommend their usage in new implementations across all of its API documentation.
- How to deal with credentials in automated scripts?
-
pfSense configuration backup
And if you really want to be secure you need to something better than a SecureString: https://github.com/dotnet/platform-compat/blob/master/docs/DE0001.md
What are some alternatives?
OpenKeychain - OpenKeychain is an OpenPGP implementation for Android.
envchain - Environment variables meet macOS Keychain and gnome-keyring <3
wpa2-wordlists - A collection of wordlists dictionaries for password cracking
ImportExcel - PowerShell module to import/export Excel spreadsheets, without Excel
dotfiles - Home directory with an absurd amount of tweaks
envconsul - Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.
transcrypt - transparently encrypt files within a git repository
MailKit - A cross-platform .NET library for IMAP, POP3, and SMTP.
pass-tomb - A pass extension that helps you keep the whole tree of passwords encrypted inside a Tomb.
distrobuilder - System container image builder for LXC and Incus
Android-Password-Store - Android application compatible with ZX2C4's Pass command line application
AngleSharp - :angel: The ultimate angle brackets parser library parsing HTML5, MathML, SVG and CSS to construct a DOM based on the official W3C specifications.