xtrendence / x-landrop

An AirDrop-like application running on Node.js (with Electron) that allows for encrypted file sharing between devices on the same network.

X:/LANDrop

Disclaimer: A better and more lightweight version of this application is available here.

An AirDrop-like web application that runs on Node.js, and is wrapped with ElectronJS to allow for cross-platform functionality.

Starting the application hosts a server on the user's device. There are two ways devices can interact with one another:

• User X can host a server, and user Y can connect to it by simply visiting user X's IP address (along with the server's port number, which is 6969 by default) using a browser. From there, user Y can send files to user X, but not the other way around. Obviously user Y cannot send files without user X's permission.

• Both users can host servers, at which point X:/LANDrop will automatically detect the other user on the network, and allow them to share files with one another. If the app fails to detect the other user, the first method can still be used.

Before a user can send files to another user, they need to ask for permission. The other user can either add them to their whitelist, blacklist or simply decline their request.

Since X:/LANDrop is most likely to be used in a local area network, it's unlikely that users would have SSL, so 2048-bit (changeable) RSA keys are generated when the app is first launched, and the user's public key is accessible to any connecting client. Files are encrypted using AES-256-CTR with a random key and IV. The key is then encrypted (with RSA) using the recipient's public key. On the recipient's side, the key is decrypted using their private key, and is used to decrypt the file. This way, MITM attacks don't pose a threat.

By default, X:/LANDrop saves files to the user's "Downloads" folder. The maximum upload file size is 10GBs, but since the file content is being read by the browser before being encrypted and sent to the server through an HTTP POST request, it's highly recommended not to exceed ~1GB, though it'll probably work, I just wouldn't rely on it.

Launch using Electron:

If you don't want to download the app using the links below, you can download the source code, "cd" into the directory, run "npm install", run "npm i -g electron", "npm i -g nodemon" and then start the app using "nodemon --exec electron ." and it should launch.

Download

Platform	Download Link
Mac	https://drive.google.com/open?id=1hfms74JTOMmVTlV4orTTkXbR26ulqhbX
Linux	https://drive.google.com/open?id=1vZMqrWm5z9_11t2zLo2WipNqM4-gQrX8
Windows	https://drive.google.com/open?id=1d5OD04BVjbsxqk1FW4fjXA4owMe-HyWO

Please note that on Mac it might say that the application can't be opened because it's from an unidentified developer. To fix this, simply open System Preferences, go to Security & Privacy, click on the General tab, and find the Open Anyway button at the bottom of the page.

x-landrop's Issues

Add encryption.

Encrypt files with AES-256-CTR, encrypt the key and IV with RSA-3096.

Add the ability for clients to send each other their public keys.

Add upload functionality.

Add file dialog functionality.

Add drag and drop ability.

Add upload functionality.

Make uploads resumable and able to be uploaded in chunks.

Check to see if the recipient is still active and running X:/LANDrop before the user is allowed to send the file.

Consider using Socket.IO to make everything easier.

Show an error on the UI when the API can't be reached.

Add notification functionality.

Notification when an upload starts and finishes, or fails.

Notification when the user is receiving a file, giving them the ability to accept or decline the request.