Welcome, Guest
You have to register before you can post on our site.



Search Forums

(Advanced Search)

Forum Statistics
» Members: 474
» Latest member: john9871234
» Forum threads: 36
» Forum posts: 130

Full Statistics

Latest Threads
Win 10 Client Errors
Forum: Problems
Last Post: john9871234
12 minutes ago
» Replies: 1
» Views: 306
Forum: Hashtopolis
Last Post: mrmike
06-01-2019, 01:16 PM
» Replies: 2
» Views: 143
How to use password lengt...
Forum: Howto
Last Post: s3in!c
05-29-2019, 12:02 PM
» Replies: 2
» Views: 478
Server Update woes
Forum: Problems
Last Post: Walkanator
05-26-2019, 01:59 PM
» Replies: 9
» Views: 744
Windows Client not receiv...
Forum: Problems
Last Post: AetherPirate
05-20-2019, 06:39 PM
» Replies: 4
» Views: 231
Forum: Hashtopolis
Last Post: hops
05-20-2019, 04:47 AM
» Replies: 1
» Views: 183
Setting up an Agent with ...
Forum: Problems
Last Post: pgillespie20
05-16-2019, 09:55 PM
» Replies: 2
» Views: 410
HC already running on pid
Forum: Problems
Last Post: s3in!c
03-26-2019, 09:24 AM
» Replies: 4
» Views: 523
Forum: Problems
Last Post: hops
03-17-2019, 10:30 AM
» Replies: 1
» Views: 401
Hashtopolis compatibile c...
Forum: Hashtopolis
Last Post: satcom886
03-10-2019, 01:04 AM
» Replies: 3
» Views: 847

  client tries to download 7zr over port 80
Posted by: JokerActual - 02-22-2019, 08:30 PM - Forum: Problems - Replies (1)

I'm running my set up on a separate VM alongside my public webserver VM (two different VMs).  Both servers are running nginx and the public webserver receives requests for my domain name for my hashtopolis server and performs a reverse proxy to the hashtopolis VM webserver which then handles the request.  The public webserver redirects all port 80 HTTP requests via 301 redirect to port 443 HTTPS.

I'm running into an issue trying to get any python client to function.  It seems the client is able to register and collect agent data but then fails to find '7zr'.  Below is the output the client gives me.  I receive the same on both windows 10 and ubuntu.  I've tried sudo on ubuntu with no change.  The server is running on ubuntu server 18.04 running nginx.  I do not see any access or error logs in regards to the client requesting 7zr from <url base>/static/7zr.

Upon further examination of the logs below it appears that the client is attempting to download the 7zr over port 80 and receives the 301 from the public facing webserver which causes the client to return an error..  Removing the 301 redirect from port 80 to 443 on the public facing webserver is a functional workaround for this issue.

Where do/can I set the server to inform the client to download 7zr over port 443?  I tried setting the base hostname/port/protocal to my public-facing domain via HTTPS and setting the base url - both of which appear to have no effect.

Client Output

Quote:No token found! Please enter a voucher to register your agent:
Successfully registered!
Collecting agent data...
Login successful!
Hashtopolis Server version: 0.10.1 ()
Client is up-to-date!
Traceback (most recent call last):
  File "/usr/lib/python3.6/runpy.py", line 193, in _run_module_as_main
    "__main__", mod_spec)
  File "/usr/lib/python3.6/runpy.py", line 85, in _run_code
    exec(code, run_globals)
  File "hashtopolis.zip/__main__.py", line 337, in <module>
  File "hashtopolis.zip/__main__.py", line 139, in init
  File "hashtopolis.zip/htpclient/binarydownload.py", line 22, in run
  File "hashtopolis.zip/htpclient/binarydownload.py", line 80, in __check_utils
FileNotFoundError: [Errno 2] No such file or directory: '7zr'

Relevant Nginx Access + Error log tail -f output
Quote: - - [22/Feb/2019:13:29:45 -0600] "POST /api/server.php HTTP/1.1" 200 59 "-" "s3-python-0.4.0" - - [22/Feb/2019:13:29:49 -0600] "POST /api/server.php HTTP/1.1" 200 74 "-" "s3-python-0.4.0" - - [22/Feb/2019:13:29:49 -0600] "POST /api/server.php HTTP/1.1" 200 62 "-" "s3-python-0.4.0" - - [22/Feb/2019:13:29:49 -0600] "POST /api/server.php HTTP/1.1" 200 117 "-" "s3-python-0.4.0" - - [22/Feb/2019:13:29:49 -0600] "POST /api/server.php HTTP/1.1" 200 78 "-" "s3-python-0.4.0" - - [22/Feb/2019:13:29:49 -0600] "POST /api/server.php HTTP/1.1" 200 118 "-" "s3-python-0.4.0"

Here are the requested details
Hashtopolis server version 0.10.1+
Client version 0.4.0
hashcat version 5.1.0

Debug output from client:

Quote:[2019-02-22 13:44:55,580] [INFO ] Found existing lock.pid, checking if python process is running...
[2019-02-22 13:44:55,581] [INFO ] Ignoring lock.pid file because PID is not existent anymore or not running python!
[2019-02-22 13:44:55,581] [INFO ] Starting client 's3-python-0.4.0'...
[2019-02-22 13:45:08,019] [DEBUG] Setting url to: https://hashtopolis-server/api/server.php
[2019-02-22 13:45:08,020] [DEBUG] {'action': 'testConnection'}
[2019-02-22 13:45:08,028] [DEBUG] Starting new HTTPS connection (1): hashtopolis-server
[2019-02-22 13:45:08,101] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:08,106] [DEBUG] b'{"action":"testConnection","response":"SUCCESS"}'
[2019-02-22 13:45:08,107] [DEBUG] Connection test successful!
[2019-02-22 13:45:26,658] [DEBUG] {'action': 'register', 'voucher': 'aaa', 'name': 'WS01'}
[2019-02-22 13:45:26,890] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:26,891] [DEBUG] b'{"action":"register","response":"SUCCESS","token":"T9LQue26rb"}'
[2019-02-22 13:45:26,906] [INFO ] Successfully registered!
[2019-02-22 13:45:26,914] [INFO ] Collecting agent data...
[2019-02-22 13:45:27,090] [DEBUG] {'action': 'updateInformation', 'token': 'T9LQue26rb', 'uid': 'eaa90cbc-2ee9-4e1b-a6e0-799a1853f333', 'os': 0, 'devices': ['Intel® Xeon® CPU E5420 @ 2.50GHz', 'Intel® Xeon® CPU E5420 @ 2.50GHz', 'VMware SVGA II Adapter']}
[2019-02-22 13:45:27,149] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:27,152] [DEBUG] b'{"action":"updateInformation","response":"SUCCESS"}'
[2019-02-22 13:45:27,153] [DEBUG] {'action': 'login', 'token': 'T9LQue26rb', 'clientSignature': 's3-python-0.4.0'}
[2019-02-22 13:45:27,221] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:27,222] [DEBUG] b'{"action":"login","response":"SUCCESS","multicastEnabled":false,"timeout":30,"server-version":"0.10.1 ()"}'
[2019-02-22 13:45:27,223] [INFO ] Login successful!
[2019-02-22 13:45:27,223] [INFO ] Hashtopolis Server version: 0.10.1 ()
[2019-02-22 13:45:27,224] [DEBUG] {'action': 'checkClientVersion', 'token': 'T9LQue26rb', 'version': '0.4.0', 'type': 'python'}
[2019-02-22 13:45:27,288] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:27,289] [DEBUG] b'{"action":"checkClientVersion","response":"SUCCESS","version":"OK"}'
[2019-02-22 13:45:27,289] [INFO ] Client is up-to-date!
[2019-02-22 13:45:27,290] [DEBUG] {'action': 'downloadBinary', 'token': 'T9LQue26rb', 'type': '7zr'}
[2019-02-22 13:45:27,359] [DEBUG] https://hashtopolis-server:443 "POST /api/server.php HTTP/1.1" 200 None
[2019-02-22 13:45:27,360] [DEBUG] b'{"action":"downloadBinary","response":"SUCCESS","executable":"http:\\/\\/hashtopolis-server\\/static\\/7zr.bin"}'
[2019-02-22 13:45:27,365] [DEBUG] Starting new HTTP connection (1): hashtopolis-server
[2019-02-22 13:45:27,370] [DEBUG] http://hashtopolis-server:80 "HEAD /static/7zr.bin HTTP/1.1" 301 0

Print this item

  not work or not understand
Posted by: pccheck - 02-14-2019, 06:18 PM - Forum: Problems - Replies (7)

I'm not understanding how it works.
my server recognizes the agent but does not perform any tasks
I execute at the prompt
python hashtopolis.zip
and this only appears:
Starting client 's3-python-' ...
Collecting agent data ...
Login successful!
Hashtopolis Server version: 0.10.1
Client is up-to-date!

before I used hashtopolis.exe
but this time I can not find an agent
only hashtopolis.zip

Print this item

Question Hashtopolis compatibile cracker without OpenCL?
Posted by: satcom886 - 02-12-2019, 10:55 PM - Forum: Hashtopolis - Replies (3)

Does anyone know about a cracker, that does not have OpenCL (this means it only works with CPUs) as a dependency and is compatibile with the way, that Hashtopolis distributes tasks and communicates with the cracker?

Print this item

  Place and format of the hashcat binary using hashtopolis in offline mode
Posted by: metulski2013 - 02-11-2019, 12:18 PM - Forum: Howto - Replies (2)

Hi guys,

can you explain me the place and the format of the hashcat binary for using hashtopolis in offline mode (without internet connection)? 

Thanks a lot!

Print this item

  Giant hashlitsts
Posted by: thedailyspank - 01-26-2019, 09:02 PM - Forum: Howto - Replies (2)

I am interested in using Hahstopolis to crack the haveibeenpwned v4 hashlist. I have recovered a large potion of it already, however, there are about  220,729,511 remaining.

The MySQL server Hashtopolis is currently on is halfway decent but not awesome.

When I added 5,000,000 lines the clients never got a valid hashlist and when I used 1,000,000 hashes it never gets past the keyspace calculation on the client so nothing is attempted.

Would it be possible to build (myself) a mass-import tool that creates multiple smaller hashlists that are put directly into the database then create a superhahslist (manually) and then create a supertask (manually) to handle it?

I have a number of rules to run through and doing it manually is tedious.

Print this item

  Offer regarding the previous topic - making corrections
Posted by: zielar - 01-23-2019, 06:04 PM - Forum: Howto - No Replies

Due to the fact that nothing is happening here completely and I do not have the strength to read this stupid message "returned non-zero exit status status 1" chasing after my own tail for over two weeks - I am asking for a willing person who will make corrections in appropriate files to enable interaction with BitCracker.

For the job done, I am willing to pay some reasonable sum for both parties.

The topic is on the list of topics under this topic, but I think that a handful of readers already know this topic.

Simple rule ... I want to use the full capabilities of Hashtopolis using BitCrack (only because Hashcat does not have a function that is necessary to me [just do not support it from the beginning and that's it]).
The server and API have been set up and configured.
Agents will be installed on hardware with more than one GPU card. BitCrack does not support multithreading (yet), so I have to run a separate process for each card. Each card is then set to a different hex range in which to search for the correct key.
Used by BitCrack and needed by me (editable) flags:
-d X (selection of the GPU device number)
 [otherwise --device]

--keyspace START: END [specifies the starting point of the scanned range and the end point in hex format]
--share X / Y [Y - determines how many parts I have divided the given range, X - determines which part of this range will scan the selected card] {useful on my example where on a given computer with four cards - all four cards work on the selected range keyspace and I run four processes there, where each of them has successively --share 1/4, --share 2/4, --share 3/4, etc.

Now additional flags that are fixed, but must work without any problems (I do not know if there would be any problem with them, because I have never seen the progress of the whole two weeks of tinkering in codes):
-b X -t X -p X (specify settings for blocks, threads and points for the GPU)
- stride X - jump value during scanning [e.g. stride 9] will cause the scan to be 9x faster by scanning every ninth hex in the range instead of one after the other)

I am waiting for the quickest options and proposals.

Print this item

  client doesn´t "start" chunk
Posted by: alpenseppl - 01-22-2019, 08:56 AM - Forum: Problems - Replies (3)

Current Server Version
Current Client Version
Hashcat Version

Task command you are using
"#HL# -a 3  -1 äöüß -2 ?l?1 -3 ÄÖÜ -4 ?u?3 ?d -O "

(Thats a subtask of a supertask. I use a mask like this one:



and so on)

Currently i have the server running in a VBox VM under lubuntu (LTS Version).
I have 5 Clients running. With two of them i have the following problem:

when i activate only a single client (with this specific problem) everything works fine.
After i activated two other clients in addition, the first one skips "starting chunk". 
It simply loops:

got Task with ID XY
Dowloading [=====]
Client is up to date
got cracker binary type hashcat
Benchmark test...
Server accepted benchmark!
got Task with ID XY
Dowloading [=====]
Client is up to date
got cracker binary type hashcat

and so on...

after i deactivate the additional clients, he starts chunks again.

the debug output is in the attachment.

thanks for your help!

Attached Files
.txt   hashtopolislog.txt (Size: 13.07 KB / Downloads: 1)
Print this item

  How to use Hashtopolis with BitCrack
Posted by: zielar - 01-16-2019, 07:56 PM - Forum: Howto - Replies (8)

I have the server version 0.10.1 installed on a web server that works as an API. I configured it by packing the application CuBitCrack.exe to BitCrack.7z and I uploaded to the same server where the API to the bin directory, after which I added in the admin panel (Crackers / Binaries tab) this file as release "generic" in version 1.0.
As I want to scan the HEX ranges for the 32btc puzzle (https://bitcointalk.org/index.php?topic=1306983.0), I have set the hashlist in order:
- Hash type: Plain text
- Using hashcat brain: No
- Format: Text
- Hashes: 1 (as the hash I gave the address to which I want to search for the right key)

I created a task for this:
- Attack command: # HL # 0800000000000000:1000000000000000 -d 0 -b 80 -t 512 -p 2800
(where I specify the HEX scope in which I want to perform this search and the settings values for the GPU card (ultimately in Windows the command running the application looks like this: cuBitCrack.exe -c -i SEARCH.txt -o FOUND.txt --continue last.txt -b 80 -t 512 -p 2560 -d 0 --keyspace 0800000000000000:1000000000000000 )
Chunk size: 600 seconds
Is small task: NO
- Enforce Piping: NO
Keyspace size: N/A (i dont know why?)
- Hashlist: hashlist created before this task

After adding the agent, I run py hashtopolis.zip where I give the address to my API and the generated token, after which the BitCrack application is downloaded and the error error non-zero size crashes.

What did I do wrong, where was my mistake and how to do it to make it right? I will just add that as a hashtype I also chose PLAINTEXT.

Error: subprocess.CalledProcessError: Command '..\crackers\4\cubit.exe keyspace #HL# -s 1Kn5h2qpgw9mWE5jKpk8PP4qvvJ1QVy8su' returned non-zero exit status 1.

Thank you very much for help

Print this item

  hashtopolis file upload
Posted by: freeroute - 01-11-2019, 07:14 PM - Forum: Howto - Replies (1)

Hashtopolis run on a dedicated remote server (OS: Ubuntu, CLI only).
Normally I use hashcat on this server by login with ssh. Wordlist file uploaded to '/usr/share/wordlist/' directory.

On this server hashtopolis also installed. When I upload wordlist files by hashtopolis, wordlist files are duplicated.
One uploaded by me for hashcat to '/usr/share/wordlist/', another one uploaded by hashtopolis.

My question: Could you recommend any solution to avoid duplicates?
e.g.: create link on hashtopolis to the dir '/usr/share/wordlist/'?

Hashtopolis: 0.10.1


Print this item

Posted by: Nubbin - 01-02-2019, 11:33 PM - Forum: Howto - Replies (2)

Alright, I should be able to figure this out, but I am failing today.

I'm trying to test out prince processor on my hashtopolis setup. From the wiki, I believe it should take a command of (for example) "#HL# rockyou.txt -r prince_optimized.rule" and pipe rockyou.txt through prince, then to hashcat (with the rules). However, even after I say it's a prince task, it still runs it straight. 

Now, I'm assuming the issue is that I'm offline (sandboxed machines - all clients are Windows, host is an ubuntu VM running in Windows), so it is trying to download prince and is unable to, so it goes ahead as a normal attack. If it's a matter of manually distributing the binary, I can do that, but I just need to know how/where it would be saved. I tried throwing pp64 in the agent hashcat folder, but that didn't work (I wasn't surprised).

I had a test environment on a internet machine, but of course it's 0.5.1, which doesn't seem to have prince as an option.

My brain isn't working today - please help!

Print this item