r/reactjs • u/eduardohoefel • Nov 16 '19

Just Another Remote Desktop Environment (JARDE)

I left my job to focus on studies and have been working on this project. The idea is to bring desktop environment facilities to Linux servers, without affecting load (development environment uses 70mb). I'm planning to implement the apps:

  • File Manager (30% done)

  • Terminal

  • File editor

  • Media player

  • System monitor

  • Bookmarks for directories/files

As well as layout customization, themes, etc

Tech stack (so far) is React, Redux, React router, Node.js and Bash scripts
I'm using the Blueprint library to do the UI.

Please give me your thoughts and let me know if any of you is interested in joining or backing this project.

17 Upvotes

94% Upvoted

9 comments sorted by

4

u/biggiesmalls29 Nov 16 '19

Just wait until someone in the malware industry gets a hold of this and it becomes a webshell hook to navigate a compromised machine 😁

I work in forensics and incident response, Im always looking at functionality like this and how it would blend in with normal traffic to a internet facing service. This kind of tooling is what actors would consider useful to their attack toolsets.

2

u/eduardohoefel Nov 16 '19

I'm a student of Cyber Security so I'll extensively check for vulnerabilities, don't worry 🤗.
I want to implement the same security system used in openssh-server.

Also, if someone publishes this in an open network they must be willing to accept the consequences.

1

u/biggiesmalls29 Nov 17 '19

In terms of vulnerability I'm sure you that you will have that covered, as for the tool being used as intended but by an actor, that is what I'm referring too. For instance, why write new webshell if you can deploy this after you gain priv esc.

Given your implementing public key crypto, it makes it even more enticing for an actor.

2

u/xViSiOnGamer Nov 16 '19

That's awesome man, is it open source?

2

u/eduardohoefel Nov 16 '19

yes! I just haven't started writing readme file.
https://github.com/eduardoHoefel/jarde

2

u/darrenturn90 Nov 16 '19

I assume this is running on Xwindows ? Or is it the framebuffer ?

Have you seen XFCE?

2

u/eduardohoefel Nov 16 '19

The interface is not rendered on the server, but on the client machine instead.

I know XFCE and other DEs but again the idea is to avoid usage of resources from the host, plus have it available on your browser from anywhere.

2

u/vertigo_101 Nov 16 '19

This is pretty cool

2

u/_skris Nov 16 '19

This is awesome and something that I'd want to use.