Kosh is a modern Flask application for secure file sharing over a local network using AES encryption and simulated Attribute-Based Encryption (ABE). It features a beautiful Tailwind-based UI, an admin dashboard for user and policy management, real-time synchronization, and improved file structure for scalability.
kosh/
├── app/
│ ├── app.py # Main Flask application
│ ├── __init__.py # Package initialization
│ ├── attribute_management.py # Attribute management logic
│ ├── crypto/
│ │ ├── aes.py # AES encryption/decryption
│ │ └── abe_simulator.py # JSON-based ABE simulation
│ ├── static/
│ │ ├── admin/ # Admin dashboard assets
│ │ │ ├── admin.css
│ │ │ ├── admin-dashboard.js
│ │ │ └── tailwind.config.js
│ │ ├── dashboard/ # User dashboard assets
│ │ │ ├── dashboard.css
│ │ │ ├── dashboard.js
│ │ │ └── dashboard-tailwind.config.js
│ │ ├── shared/ # Shared components and utilities
│ │ │ ├── components/
│ │ │ │ ├── modal.js
│ │ │ │ ├── notification-manager.js
│ │ │ │ └── toast.js
│ │ │ ├── modules/
│ │ │ │ ├── attribute-manager.js
│ │ │ │ ├── audit-manager.js
│ │ │ │ ├── dashboard-file-manager.js
│ │ │ │ ├── file-manager.js
│ │ │ │ ├── password-manager.js
│ │ │ │ ├── policy-manager.js
│ │ │ │ ├── realtime-manager.js
│ │ │ │ ├── upload-manager.js
│ │ │ │ └── user-manager.js
│ │ │ └── utils/
│ │ │ ├── admin-links.js
│ │ │ └── ui-helpers.js
│ │ └── common/ # Common assets (icons, favicons)
│ ├── templates/
│ │ ├── index.html # Login page
│ │ ├── dashboard.html # User dashboard
│ │ └── admin.html # Admin dashboard
│ ├── uploads/ # Encrypted file storage
│ └── user_keys/ # User key files
├── data/
│ ├── aes_encryption.key # AES encryption key
│ ├── aes_hmac.key # HMAC key for integrity
│ ├── attributes.json # Global attribute pool
│ ├── audit_logs.jsonl # System audit logs
│ ├── policies.json # File access policies
│ └── users.json # User accounts and attributes
├── .github/ # GitHub templates and workflows
│ └── ISSUE_TEMPLATE/
│ ├── bug_report.md
│ └── feature_request.md
├── requirements.txt # Python dependencies
└── README.md # This file
git clone https://github.com/neelshha/kosh.git
cd kosh
python -m venv venv
source venv/bin/activate # On macOS/Linux
# or
venv\Scripts\activate # On Windows
pip install -r requirements.txt
python -m app.app
The application will start on http://localhost:7130. You can access it from any device on the same local network.
admin / passpass for all usershttp://localhost:7130/admin after logging in as adminKosh includes comprehensive real-time synchronization using WebSocket technology (Socket.IO):
user_added, user_updated, user_deletedpolicy_added, policy_updated, policy_deletedattribute_added, attribute_removedaudit_log_added for system activity trackingOpen multiple browser tabs as admin to see live synchronization:
# Admin room management
@socketio.on('join_admin')
def handle_join_admin():
user_id = session.get('user_id')
if user_id == 'admin':
join_room('admin_updates')
emit('joined_admin', {'message': 'Joined admin updates'})
# Real-time event emission
socketio.emit('user_added', {
'user': user_id,
'attributes': attributes,
'timestamp': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
}, room='admin_updates')
// Initialize connection
const socket = io();
socket.emit('join_admin');
// Listen for real-time events
socket.on('user_added', function(data) {
addUserToTable(data.user, data.attributes);
showToast(`User "${data.user}" added`, 'success');
});
For production environments, configure specific CORS origins:
socketio = SocketIO(app, cors_allowed_origins=["https://yourdomain.com"])
Real-time features work in all modern browsers supporting WebSocket:
All users have a consistent password structure:
pass for all usersThe system automatically converts legacy user formats to the new dictionary format:
{
"username": {
"attributes": ["attr1", "attr2"],
"password": "pass"
}
}
Please report security vulnerabilities by creating an issue with the “security” label. We support the following versions:
| Version | Supported |
|---|---|
| 5.1.x | ✅ |
| 5.0.x | ❌ |
| 4.0.x | ✅ |
| < 4.0 | ❌ |
Include in your report:
Kosh follows a modular architecture with clear separation of concerns:
The dashboard has been completely restructured for better maintainability:
app/static/
├── css/
│ └── dashboard.css # All dashboard styles
├── js/
│ ├── dashboard.js # Main dashboard controller
│ ├── config/
│ │ └── dashboard-tailwind.config.js # Tailwind configuration
│ ├── components/
│ │ └── notification-manager.js # Notification system
│ └── modules/
│ ├── dashboard-file-manager.js # File display and management
│ ├── upload-manager.js # File upload functionality
│ └── password-manager.js # Password change modal
# Emit events after data changes
socketio.emit('custom_event', data, room='admin_updates')
// Listen for events and update UI
socket.on('custom_event', function(data) {
updateUIElement(data);
});
user_added not uapolicy_updated not updatedfile_deleted not file_deleteWith the new modular structure, future improvements are easier:
We welcome contributions from the community! Whether it’s fixing a bug, improving documentation, or adding a new feature, all contributions are welcome.
git clone https://github.com/<your-username>/kosh.git
cd kosh
git remote add upstream https://github.com/neelshha/kosh.git
git checkout -b feature/<short-description>
Follow Conventional Commits:
<type>: <short description>
feat: add real-time file upload progress
fix: resolve WebSocket connection issues
docs: update installation instructions
refactor: restructure dashboard components
style: formatting changes, no code logic updates
test: adding or updating tests
Use our GitHub issue templates for:
git push origin feature/<branch-name>
This project is licensed for educational and internal LAN use only.
Kosh is designed for educational purposes and internal network use. It should not be exposed to the public internet without proper security hardening.
Thank you to all contributors who have helped make Kosh better:
For questions, bug reports, or feature requests:
Planned enhancements for future versions:
Happy file sharing with Kosh! 🔐📁