Hashtopus - distributed solution

[cr4zynou]

any help with this problem!!

i have this error :

Notice: Undefined index: a in G:\hashtopus\admin.php on line 153
Notice: Undefined variable: orig in G:\hashtopus\admin.php on line 1160

and the cracked hash not saved to. <== look attached file


  probleme hashtopus.png (Size: 87.85 KB / Downloads: 17)

[curlyboi]

this is because you have php notices enabled. disable them

[cr4zynou]

thank you curlyboi but the cracked hash are always 0

[keristinium]

Has anyone has issues with running the agenct on Ubuntu 14.04 through mono?

I'm getting HTTP error: Error: SendFailure (Error writing headers).

I added my .crt to /usr/local/share/ca-certificates/extra and ran update-ca-certificates.

Running sudo mono hashtopus.exe

Entering the registration voucher and receiving the above error.

[keristinium]

Has anyone has issues with running the agenct on Ubuntu 14.04 through mono?

I'm getting HTTP error: Error: SendFailure (Error writing headers).

I added my .crt to /usr/local/share/ca-certificates/extra and ran update-ca-certificates.

Running sudo mono hashtopus.exe

Entering the registration voucher and receiving the above error.

I have also tried from a windows machine

Hashtopus 0.9.7
Registering to server...Enter registration voucher: pUstpsDA
HTTP error: The underlying connection was closed: Could not establish trust rela
tionship for the SSL/TLS secure channel.
Registering to server...Enter registration voucher:

Apache logs show the last access from the agent machine as a GET:

192.168.1.136 - - GET /server.php?a=update HTTP/1.1" 200 60960

[keristinium]

Has anyone has issues with running the agenct on Ubuntu 14.04 through mono?

I'm getting HTTP error: Error: SendFailure (Error writing headers).

I added my .crt to /usr/local/share/ca-certificates/extra and ran update-ca-certificates.

Running sudo mono hashtopus.exe

Entering the registration voucher and receiving the above error.

I have also tried from a windows machine

Hashtopus 0.9.7
Registering to server...Enter registration voucher: pUstpsDA
HTTP error: The underlying connection was closed: Could not establish trust rela
tionship for the SSL/TLS secure channel.
Registering to server...Enter registration voucher:

Apache logs show the last access from the agent machine as a GET:

192.168.1.136 - - GET /server.php?a=update HTTP/1.1" 200 60960

Solved this. the problem was with my common name (CN) decleration. Re generated my crt using my hostname as CN and all works fine.

[keristinium]

Would it be possible to add the import directory as a configurable option. For example all my word lists, hash sets etc.. are stored on a NAS. It would be really nice to be able to specific the NAS as the location for storing these files rather than a folder in the website DIR.

[curlyboi]

Would it be possible to add the import directory as a configurable option. For example all my word lists, hash sets etc.. are stored on a NAS. It would be really nice to be able to specific the NAS as the location for storing these files rather than a folder in the website DIR.

You mean the agents would download it via FTP/SMB?

[cryptolovi]

People reported seeing hashes cracked but 0 returned to the server probably run a newer version of php where HTTP_RAW_POST_DATA is deprecated.

To see if you are affected look for "PHP Notice: Undefined variable: HTTP_RAW_POST_DATA in server.php on line 641i" in your http daemon logs.

I'm not 'skilled' in PHP, but I changed the lines in server.php from;
if (strlen($HTTP_RAW_POST_DATA)>0) {
$data=explode($newline,$HTTP_RAW_POST_DATA);

into the new method;
if (strlen(file_get_contents("php://input"))>0)
$data=explode($newline,file_get_contents("php://input"));

[mastercracker]

Would it be possible to add the import directory as a configurable option. For example all my word lists, hash sets etc.. are stored on a NAS. It would be really nice to be able to specific the NAS as the location for storing these files rather than a folder in the website DIR.

I think that I have a valid solution for Windows users (Vista and above):

1) Open a command shell with administrator privileges and navigate to the import folder of hashtopus.
2) Create a symlink to the file on your NAS.

Code:

mklink dictionary1.txt "\NAS drive\dictionaries\targetdic.txt"

This will create in the import folder a file called dictionary1.txt of size 0 Kb that will point to the targetdic.txt in the NAS.
3) Import dictionary1.txt from Hashtopus (from import directory) like you would do with real wordlist.
4) Use it in your attack and it works just like if it was in the hashtopus folder.