hashtopolis / server

Hashtopolis - distributed password cracking with Hashcat
GNU General Public License v3.0
1.46k stars 222 forks source link

[BUG]: Cracked hashes not appearing in GUI or API #1101

Open yungcero opened 1 month ago

yungcero commented 1 month ago

Version Information

0.14.2

Hashcat

6.2.6

Description

When accessing the "cracked" section of hashtopolis, whether through the GUI or API (getCracked request) will return empty values even though hashes are verified to be cracked and can be seen when clicked on the link. The hashlists being cracked are composed of one hash.

The bottom shows what happens when clicking on Cracks:

Screenshot 2024-10-10 at 10 52 47 AM

However hashlists show it is cracked:

Screenshot 2024-10-10 at 10 53 29 AM Screenshot 2024-10-10 at 10 53 08 AM

And with a publicly available hash, shows the plaintext:

Screenshot 2024-10-10 at 10 53 43 AM

Cracked hashes can only be accessible when clicking on the link chain. When using the api or the cracks tab nothing shows for the hashlist as it being cracked. It is using runtime benchmark and this is the command: #HL# rockyou.txt -d 2 --hwmon-disable. I can also produce the hash for testing if needed as it is a publicly accessible one on Github used for CTFs

yungcero commented 1 month ago

I also get this error with my agent after i crack a hash. Not sure if its related but want to throw it in here just in case

Client is up-to-date!
Got cracker binary type hashcat
Keyspace got accepted!
Benchmark task...
Server accepted benchmark!
Start chunk...
Progress: 41.11% Speed:   4.01MH/s Cracks: 1 Accepted: 1 Skips: 0 Zaps: 0
finished chunk
Client is up-to-date!
Getting of file failed: {'action': 'getFile', 'response': 'ERROR', 'message': 'Client is not assigned to this task!'}
yungcero commented 1 month ago

In addition, looks like the MySQL table is not getting populated even though the hashlist is showing it as cracked:

image
yungcero commented 1 month ago

Going to fork the repo and push up some changes, think i have a bandaid fix for at least the api side

jessevz commented 2 weeks ago

Currently this issue has been resolved for the API. Only thing that is left is the GUI part which resides in src/cracks.php

yungcero commented 2 weeks ago

sweet. i can take a look at that too