server icon indicating copy to clipboard operation
server copied to clipboard

[BUG]: Cracked hashes not appearing in GUI or API

Open yungcero opened this issue 1 year ago • 5 comments

Version Information

0.14.2

Hashcat

6.2.6

Description

When accessing the "cracked" section of hashtopolis, whether through the GUI or API (getCracked request) will return empty values even though hashes are verified to be cracked and can be seen when clicked on the link. The hashlists being cracked are composed of one hash.

The bottom shows what happens when clicking on Cracks:

Screenshot 2024-10-10 at 10 52 47 AM

However hashlists show it is cracked:

Screenshot 2024-10-10 at 10 53 29 AM Screenshot 2024-10-10 at 10 53 08 AM

And with a publicly available hash, shows the plaintext:

Screenshot 2024-10-10 at 10 53 43 AM

Cracked hashes can only be accessible when clicking on the link chain. When using the api or the cracks tab nothing shows for the hashlist as it being cracked. It is using runtime benchmark and this is the command: #HL# rockyou.txt -d 2 --hwmon-disable. I can also produce the hash for testing if needed as it is a publicly accessible one on Github used for CTFs

yungcero avatar Oct 10 '24 17:10 yungcero

I also get this error with my agent after i crack a hash. Not sure if its related but want to throw it in here just in case

Client is up-to-date!
Got cracker binary type hashcat
Keyspace got accepted!
Benchmark task...
Server accepted benchmark!
Start chunk...
Progress: 41.11% Speed:   4.01MH/s Cracks: 1 Accepted: 1 Skips: 0 Zaps: 0
finished chunk
Client is up-to-date!
Getting of file failed: {'action': 'getFile', 'response': 'ERROR', 'message': 'Client is not assigned to this task!'}

yungcero avatar Oct 14 '24 12:10 yungcero

In addition, looks like the MySQL table is not getting populated even though the hashlist is showing it as cracked: image

yungcero avatar Oct 14 '24 12:10 yungcero

Going to fork the repo and push up some changes, think i have a bandaid fix for at least the api side

yungcero avatar Oct 14 '24 15:10 yungcero

Currently this issue has been resolved for the API. Only thing that is left is the GUI part which resides in src/cracks.php

jessevz avatar Nov 05 '24 14:11 jessevz

sweet. i can take a look at that too

yungcero avatar Nov 05 '24 23:11 yungcero

@yungcero can we close this issue?

ObsidianOracle avatar Aug 20 '25 11:08 ObsidianOracle

Hey, yes i believe so if you are ok with the GUI fix not being implemented. I apologize, was going to take a look but other responsibilities came up

yungcero avatar Aug 25 '25 12:08 yungcero