Learn
archived
witness-vault: AES-256-GCM self-decrypting HTML vaults (no install)
- Engineer — Learn: Interesting pattern for offline/air-gapped secret sharing using native WebCrypto — worth evaluating if your team needs zero-dependency encrypted file handoff, but no action required on running systems.
- SOC/IR — Learn: Self-decrypting HTML files are a known smuggling vector; this open-source implementation illustrates the technique and may inform tuning of HTML smuggling detections in your email/proxy pipeline.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.