Skip to content

Release v1.1.0

Choose a tag to compare

View all tags
@s3inlc s3inlc released this 05 Nov 13:58
· 23 commits to master since this release
v1.1.0
c912e70
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New Features

  • Cracker Binaries: Cracker binaries can now be uploaded and stored on the server. This allows that agents can download for example hashcat directly from the server and does not require a third-party HTTP download server. This also allows Hashtopolis to now use the uploaded hashcat and analyze the available hash modes for each hashcat version automatically. When creating a task it is then only possible to select hashcat versions which are having the hashtype of the corresponding hashlist.
  • Background Jobs: The server now can do certain actions in the background to not block a HTTP API response. Only few actions are implemented yet, but more will be added in the future.

Enhancements

  • Adding tokenName for api keys to allow setting a name (#2431)
  • Removed outdated yubikey totp, part of removal of old frontend (#2479)
  • Added refresh token support to backend (#2493)
  • Implement adaptive chunk sizes / adaptive speed benchmark results (#2427)
  • Added rust agent 0.1.1 (#2523)
  • Added the hashlist isSecret field to the taskdisplayview (#2480)
  • Allow uploading and storing cracker binaries on the server (#2499)
  • Access groups for cracker binaries (#2500)
  • Adding background jobs (#2502)
  • Added association of hashtypes to cracker binaries (#2503)
  • Scan hashcat automatically for hashtypes (#2505)
  • Update initial hashcat inserted to 8.0.0 (#2604)

Bugfixes

  • Handling both benchmark default values properly (#2498)
  • Initialize all possible lookups from the legacy frontend to 0 to avoid crashes (#2504)
  • Prevent exits of setup.php with die() which returns 0 (#2511)
  • Fix sort errors on long hashes (#2512)
  • Fix check for database readiness to avoid timing race-condition (#2514)
  • Fix checking strlen() on salts (#2519)
  • Fix 22000 cracks from hashcat 8.0.0 being skipped (#2541)
  • Also scan older hashcat versions which do not provide --json flag (#2600)

DEPRECATION NOTICES

  • The old frontend will be removed soon, there is no guarantee that it will be contained in further releases. Users should switch to the new frontend.
  • The user api is now officially deprecated and is subject to be removed within the next months.
  • Support for .7z compressed files (e.g. wordlists) will be removed. Hashcat supports various compressions directly which reduces the overhead and does not require Hashtopolis to do extra handling around it (which is also more error-prone to user mistakes). Best compression to use for distributing tasks is xz -T0 (see hashcat docs for details).
  • Binary hashes support will be removed within the next releases, there are replacement modes in hashcat which should be used instead (e.g. 29311 instead of 6211).
Assets 2
Loading