valent-p/qecho

QEcho: Zero-Knowledge Dead Drop

QEcho is a secure, ephemeral command-and-control (C2) messaging system designed for secure communication in hostile environments. It uses a Twin-Key Blind Indexing architecture to ensure that the server (hosted on Hugging Face) cannot read the data or even know which messages belong to which group.

Features

• —Zero-Knowledge Encryption: Data is encrypted on the client side using Fernet (AES). The server never sees the key.
• —Twin-Key Architecture: Separation of Encryption Key and Storage Index prevents Rainbow Table attacks on group names.
• —Ephemeral Storage: The --burn flag permanently destroys data upon retrieval.
• —Portability: Compiled into a standalone .exe for use on air-gapped or restricted machines (via USB).

Architecture

1. 1.Client: Python (Compiled to EXE). Handles key derivation and encryption.
2. 2.Server: FastAPI on Docker (Hugging Face Spaces).
3. 3.Database: Supabase (PostgreSQL).

Usage

1. Send a Message (Exfiltration)

Encrypts a message and pushes it to the generic handler.

.\qecho.exe send --group "OpsChannel" --key "SuperSecretPass" --msg "Target acquired."