Skip to content

rhpo/evilcorp

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

EvilCorp - Secure Chat (Educational)

This is a small Windows Forms educational project demonstrating basic cryptography primitives and a local messaging UI. It is intended for learning and demonstration in a controlled environment.

Features

  • Login and simple user management (stored in evilcorp.db).
  • Chat UI with selectable encryption algorithms (Caesar, Affine, Hill).
  • Encrypt / Decrypt tester to try algorithms and keys.
  • Dashboard with Profile, Send Messages, Encrypt/Decrypt, and Attack (demo-only) sections.
  • Password storage migrated to SHA-256 hashing with a migration utility (see DatabaseManager.MigratePlaintextPasswordsToHash).

Seeded accounts (for testing)

  • mehdi / 234
  • anis / 54321
  • ramy / #esst#
  • sarah / 222
  • amir / 99999
  • sami / 11111
  • yousef / yousef123
  • malik / 55555
  • sonia / sonia03!#
  • boulkrinate / !@samia001
  • yousra / 432
  • lotfi / helloworld!

Security measurements added

  • Confirm dialogues on sensitive actions: logout, profile edits, and revealing stored password/hash.
  • Profile edits require entering current password to authorize username/password changes.
  • Registration only requires username and password; duplicate usernames are rejected.
  • Passwords in the database are stored in the PasswordHash column. Depending on the project state the value may be plaintext, ROT13, or an SHA-256 hex digest — do not assume plaintext in production.
  • The Reports view is embedded in the Dashboard as a guarded section (placeholder) — a PDF viewer can be added here later.

Warning

  • The seeded account list and their passwords above are present in this README and the local database for demo/testing only. This is insecure for production. Remove test accounts and do not publish real credentials.

Security & Ethics

  • This project is educational. Real offensive functionality (brute-force/dictionary/MITM) is disabled or removed.
  • Passwords are stored as SHA-256 hashes in the database. For real applications use a slow KDF (PBKDF2/Argon2/Bcrypt) with per-user salts.

Run locally

  1. Install .NET SDK (recommended .NET 8).
  2. Open a terminal in the repository root.
  3. Restore and build:
    • dotnet nuget locals --clear all
    • dotnet restore
    • dotnet build
  4. Run:
    • dotnet run --project EvilCorp

Repository notes

  • Main code is in the EvilCorp/ folder. Designer files define the Windows Forms UI.
  • Database file evilcorp.db is created in the repo root on first run.

If you encounter package restore errors, try clearing local NuGet caches and ensure internet connectivity. If a package fails to restore, I can update the project to use a different provider or help fix the specific restore error.

License

  • Educational/demo only.

Contact

  • This project was modified by an automated assistant (GitHub Copilot) per user requests.

About

Security Encryption-Decryption Project

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors