Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 764
» Latest member: garimajoshi12
» Forum threads: 107
» Forum posts: 359

Full Statistics

Latest Threads
Sustainable password crac...
Forum: Hashtopolis
Last Post: madpierre
11-22-2020, 03:47 PM
» Replies: 0
» Views: 215
Hashcat not using full po...
Forum: Hashtopolis
Last Post: raptork
11-19-2020, 05:17 AM
» Replies: 0
» Views: 228
Mobile App for Hashtopoli...
Forum: Hashtopolis
Last Post: raptork
11-13-2020, 02:16 AM
» Replies: 2
» Views: 362
The --increment flag
Forum: Problems
Last Post: raptork
11-04-2020, 08:22 AM
» Replies: 2
» Views: 182
Hash data too long
Forum: Problems
Last Post: raptork
10-29-2020, 02:12 AM
» Replies: 4
» Views: 276
Device Temperature & Util...
Forum: Howto
Last Post: raptork
10-27-2020, 01:59 AM
» Replies: 4
» Views: 329
Silencing the output of t...
Forum: Hashtopolis
Last Post: raptork
10-27-2020, 01:50 AM
» Replies: 2
» Views: 383
multiple hash types for o...
Forum: Howto
Last Post: knust
10-22-2020, 07:22 AM
» Replies: 4
» Views: 341
Assigning Tasks With New ...
Forum: Howto
Last Post: s3in!c
10-20-2020, 08:29 PM
» Replies: 1
» Views: 207
Agent errors: Use of --re...
Forum: Problems
Last Post: cpt_kernel
10-19-2020, 09:31 PM
» Replies: 4
» Views: 405

 
  Sustainable password cracking
Posted by: madpierre - 11-22-2020, 03:47 PM - Forum: Hashtopolis - No Replies

I'm a big fan of Solar project, and I run a few raspberry pi on solar. But I've got my hand on one of those new Nvdiia 2GB nano board that can run from 5v USB C. over this weekend I've manged to get Hashtopolis running on this wee little nao board with only 9W power draw. My first task was to compile Hashcat on the nano board and test it. once done, then download and run the python3 script. this is where i ran into a issue with Hashtopolis. First off ( Yes I know ) it was downloading the amd64 version from the link. Just had to replace that with the comiled version earlier. then I ran into a issue with the benchmark not runn so I entered in a manual number on the server. [ 4096:4033497.7 ] , And was able to run a test. Ok it's slow 4.8Kh/s compared to a desktop rig. But this is a raspberry sized board, that can run on solar. Anyhow what I would like to know is what do the number's mean on the benchmark. 4096???:4.33497.7??? . Also as anyone else done solar cracking ?.

Also may I add. the Jetson Nvidia nano 2GB only just run with it limited memory on Version 4.4.1. Only run's on a fresh boot with logging into desktop ( I log in via ssh ). Won't run once it's been running other task, due to low memory.

Print this item

  Hashcat not using full power of GPU
Posted by: raptork - 11-19-2020, 05:17 AM - Forum: Hashtopolis - No Replies

Hi there, it's me again.

I am running a bruteforce task with the attack command like this:

-a 3 -1 ?l?d?s?u #HL# ?1?1?1?1?1?1?1?1?1

In my iMac, it's using 65% GPU power only, and the speed is 0% with my NVIDIA GeForce GT 750M display card. (see the attached screenshot)
   
In my older MacBook Pro (which is much less powerful) running the same task, the speed is 12H/s (still very slow), and using 35% GPU power only (Intel HD Graphics 4000).

How come the MacBook Pro runs faster than the iMac with less GPU utilization?

From hashcat documentation, it said the task has not enough workload:
https://hashcat.net/wiki/doku.php?id=fre...full_speed

Is it also true in my case?

The keyspace size should be huge enough: 6,634,204,312,890,625, which now takes 12,245,200y 72d 16:54:54 to finish Tongue

Print this item

  Mobile App for Hashtopolis
Posted by: raptork - 11-04-2020, 09:16 AM - Forum: Hashtopolis - Replies (2)

I can create a mobile app for Hashtopolis using the Server API. 
Do you think it's useful?

btw, I have created a Pull Request about validating the attack command. 
https://github.com/s3inlc/hashtopolis/pull/672
Would you mind to have a look?

Print this item

  The --increment flag
Posted by: raptork - 11-03-2020, 04:42 AM - Forum: Problems - Replies (2)

If the attack command contains `--increment`, the agent will tell it cannot be used with `--keyspace` when the task first got downloaded and keyspace test command is being executed.

I think when the keyspace test command is being executed, the `--increment` flag should be omitted, otherwise the `--increment` cannot exist in Mask Attack.

The attack command is as follow:

Code:
-a 3 --increment #HL# ?a?a?a?a?a?a?a?a

Print this item

  Hash data too long
Posted by: raptork - 10-27-2020, 07:51 AM - Forum: Problems - Replies (4)

I have a password-protected ZIP file.

I generated the hash via John the Ripper:

Code:
/johntheripper_directory/run/zip2john central.zip > central.zip.hash

I cannot attach the hash file here, but the length of the hash file is 465,959 bytes.

When I try to upload the file as a new hash list, the system got 500 Internal Server Error. I checked the Apache2 error log, it said:

Code:
SQLSTATE[22001]: String data, right truncated: 1406 Data too long for column 'hash' at row 1 in AbstractModelFactory.class.php:367

I checked the DB schema, the column has TEXT data type, which the max length is 65,535, exceeding the length of the given hash.
I think LONGTEXT should be used instead, which the max length is 4,294,967,295 characters.


btw, which type of hash should I use? It's a ZIP file generated by the "zip" command in macOS Terminal. When issuing the "zip2john" command, the following line appears:


Code:
ver 2.0 efh 5455 efh 7875 central.zip->floyd.wav PKZIP Encr: 2b chk, TS_chk, cmplen=232921, decmplen=358408, crc=70B1D6B


13600 - WinZip
17200 ~ 17230 - PKZIP



Attached Files
.zip   central.zip (Size: 227.68 KB / Downloads: 0)
Print this item

  Silencing the output of the agent
Posted by: raptork - 10-23-2020, 09:36 AM - Forum: Hashtopolis - Replies (2)

For the same task, the output of Ubuntu Linux (CPU) is different than macOS (GPU):


Code:
Sending 0 cracks...
{'action': 'sendProgress', 'token': 'nisPTTEiaU', 'chunkId': 5480, 'keyspaceProgress': 207536, 'relativeProgress': 0, 'speed': 12, 'state': 2, 'cracks': [], 'cpuUtil': [52.7]}
https://example.com:443 "POST /hashtopolis/src/api/server.php HTTP/1.1" 200 80
b'{"action":"sendProgress","response":"SUCCESS","cracked":0,"skipped":0,"zaps":[]}'
Progress:  0.00% Speed:  12.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
STATUS 3 SPEED 12 1000 EXEC_RUNTIME 36.380824 CURKU 207536 PROGRESS 207536 214948 RECHASH 0 1 RECSALT 0 1 REJECTED 0 UTIL -1
Sending 0 cracks...
{'action': 'sendProgress', 'token': 'nisPTTEiaU', 'chunkId': 5480, 'keyspaceProgress': 207536, 'relativeProgress': 0, 'speed': 12, 'state': 2, 'cracks': [], 'cpuUtil': [56.9]}
https://example.com:443 "POST /hashtopolis/src/api/server.php HTTP/1.1" 200 80
b'{"action":"sendProgress","response":"SUCCESS","cracked":0,"skipped":0,"zaps":[]}'
Progress:  0.00% Speed:  12.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
STATUS 3 SPEED 12 1000 EXEC_RUNTIME 36.368277 CURKU 207536 PROGRESS 207536 214948 RECHASH 0 1 RECSALT 0 1 REJECTED 0 UTIL -1
Sending 0 cracks...
{'action': 'sendProgress', 'token': 'nisPTTEiaU', 'chunkId': 5480, 'keyspaceProgress': 207536, 'relativeProgress': 0, 'speed': 12, 'state': 2, 'cracks': [], 'cpuUtil': [55.1]}
https://example.com:443 "POST /hashtopolis/src/api/server.php HTTP/1.1" 200 80
b'{"action":"sendProgress","response":"SUCCESS","cracked":0,"skipped":0,"zaps":[]}'
Progress:  0.00% Speed:  12.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
STATUS 3 SPEED 12 1000 EXEC_RUNTIME 36.236952 CURKU 207536 PROGRESS 207536 214948 RECHASH 0 1 RECSALT 0 1 REJECTED 0 UTIL -1
Sending 0 cracks...
{'action': 'sendProgress', 'token': 'nisPTTEiaU', 'chunkId': 5480, 'keyspaceProgress': 207536, 'relativeProgress': 0, 'speed': 12, 'state': 2, 'cracks': [], 'cpuUtil': [63.5]}
https://example.com:443 "POST /hashtopolis/src/api/server.php HTTP/1.1" 200 80
b'{"action":"sendProgress","response":"SUCCESS","cracked":0,"skipped":0,"zaps":[]}'
Progress:  0.00% Speed:  12.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
STATUS 3 SPEED 12 1000 EXEC_RUNTIME 36.319818 CURKU 207536 PROGRESS 207536 214948 RECHASH 0 1 RECSALT 0 1 REJECTED 0 UTIL -1


For Ubuntu Linux (CPU Task), it is much cleaner:


Code:
Start chunk...
Sending keepalive progress to avoid timeout...
Progress:  3.15% Speed:  40.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress:  6.31% Speed:  40.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress:  9.47% Speed:  40.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 12.63% Speed:  39.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 15.78% Speed:  39.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 17.89% Speed:  38.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 21.05% Speed:  38.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 24.21% Speed:  38.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 27.36% Speed:  38.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0
Progress: 29.47% Speed:  37.00H/s Cracks: 0 Accepted: 0 Skips: 0 Zaps: 0



How to make the macOS (GPU Task) to output cleaner results? They use the same command:

Code:
python3 hashtopolis.zip

Print this item

  Device Temperature & Utilisation information
Posted by: raptork - 10-21-2020, 05:38 AM - Forum: Howto - Replies (4)

In the agent details page, I notice that Device Temperature & Utilisation information are not available, no matter NVIDIA, AMD GPU or CPU is used. How to make it available?

Print this item

  Assigning Tasks With New Wordlists: Local Verification of Wordlist?
Posted by: cpt_kernel - 10-20-2020, 05:10 PM - Forum: Howto - Replies (1)

I have a small web server in AWS running the Hashtopolis server instance. 

My agents are on various machines around the world. At least one of my wordlists is 22GB+.
I'm looking for a way to have this file already included in my image and the server verify its existence, rather than push it.

--debug

{'action': 'getFile', 'token': 'xxxxx', 'taskId': 41, 'file': 'top2billion.txt'}
http://www.hash-server.com:80 "POST /api/server.php HTTP/1.1" 200 155
b'{"action":"getFile","filename":"top2billion.txt","extension":"txt","response":"SUCCESS","url":"getFile.php?file=8&token=xxxxxx","filesize":2286876

This puts the "top2billiob.txt" file in /home/cracking-agent/files/top2billion.txt

If I already have this file there, it appears to want to overwrite it. 
Is there a workaround or a method to avoid sending 20GB+ to every agent?

Print this item

  multiple hash types for one hash?
Posted by: knust - 10-20-2020, 10:41 AM - Forum: Howto - Replies (4)

Hello there,
I am new to Hashtopolis. So far it seems like an awesome tool but I have got a question about the usage:

If I have a raw hash and I am not sure about the hash type, what is the best way to create a task with multiple modes (e.g. veracrypt 13711 & 13722). For me it seems, that I need to create multiple hash lists with different hash types and create a task for each one of them. Is there a possibility to make this easier?

Thank you in advance.

knust

Print this item

  Agent errors: Use of --remove not supported and Getting of chunk failed
Posted by: cpt_kernel - 10-19-2020, 08:13 PM - Forum: Problems - Replies (4)

10+ hours into this and I have tried nearly everything. Desperate for some help on this one. 

$ uname -a
Linux kraken-office 4.15.0-122-generic #124-Ubuntu SMP Thu Oct 15 13:03:05 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

$ sudo python3 agent.zip
Starting client 's3-python-0.6.0.10'...
Collecting agent data...
Login successful!
Hashtopolis Server version: 0.12.0 ()
Client is up-to-date!

I have tried reconfiguring the task creation in every concievable way, but always get one of two errors:


ERROR 1: Use of --remove is not supported in native hashfile-format mode
ERROR 2: Getting of chunk failed: {'action': 'getChunk', 'response': 'ERROR', 'message': 'Agent is inactive!'}

$ --debug
CALL: ./hashcat.bin --machine-readable --quiet --status --restore-disable --session=hashtopolis --status-timer 10 --outfile-check-timer=10 --outfile-check-dir=../../hashlist_9 -o ../../hashlists/9.out --outfile-format=1,2,3,4 -p " " -s 0 -l 600 --potfile-disable --remove --remove-timer=10  ../../hashlists/9 ../../files/rockyou.txt -r ../../files/OneRuleToRuleThemAll.rule  --hash-type=1000
started cracking

I also get "no task available" when there is indeed a task available

Print this item