CipherSwarm

CipherSwarm is a distributed hash cracking system designed for efficiency and scalability, built on Ruby on Rails. Inspired by the principles of Hashtopolis, CipherSwarm leverages the power of collaborative computing to tackle complex cryptographic challenges, offering a web-based interface for managing and distributing hash cracking tasks across multiple nodes.

Note

This project is a re-implementation of the original HashSlinger project, which was built on C# and .Net. The original project was abandoned due to the limitations of the original strategy to fully support the Hashtopolis protocol. The new project is built on Ruby on Rails and is designed to be more scalable and efficient.

Caution

This project is currently under active development and is not yet ready for production use. Please use it with caution.

Features

• Distributed hash cracking tasks managed through a user-friendly web interface.
• Scalable architecture to efficiently distribute workloads across a network of computers.
• Integration with hashcat for versatile hash cracking capabilities.
• Real-time monitoring of task progress and comprehensive result reporting.
• Secure, easy-to-use system for both setup and operation.

Getting Started

Project Assumptions and Target Audience

CipherSwarm, while performing functions similar to Hashtopolis, is not a reiteration of the latter. It is a unique project, conceived with a specific target audience in mind and shaped by several guiding assumptions:

1. Cracking Tool: CipherSwarm exclusively supports Hashcat as the cracking tool.

2. Connectivity: It is assumed that all clients connected to CipherSwarm will use a reliable, high-speed connection, typically found in a Local Area Network (LAN) environment.

3. Trust Level: CipherSwarm operates under the assumption that all client machines are trustworthy and are under the direct control and management of the user utilizing CipherSwarm.

4. User Base: The system assumes that users, though having different levels of administrative access, belong to the same organization or project team, ensuring a level of trust and common purpose.

5. Hashlist Management: CipherSwarm is designed to handle hashlists derived from various projects or operations. It enables users to view results from specific projects or across all projects, depending on access privileges.

6. Client-Project Affiliation: Cracking clients can be associated with specific projects, executing operations solely for that project. Alternatively, they can be permitted to perform operations across all projects, with defined priorities for specific projects.

CipherSwarm is specifically crafted for medium to large-scale cracking infrastructure, interconnected via high-speed networks. It does not support utilization over the Internet or integration with anonymous user systems acting as cracking clients. By focusing on secure, centralized, and high-performance environments, CipherSwarm delivers tailored scalability and efficiency to meet the demands of sophisticated cracking operations.

Prerequisites

• Ruby (version 3.2.0 or newer)
• Rails (version 7.1.0 or newer)
• PostgreSQL (or another Rails-supported database system)
• Redis for ActionCable support and job queue management

Installation

1. Clone the repository to your local machine:

git clone https://github.com/unclesp1d3r/CipherSwarm.git
cd CipherSwarm

2. Install the required gems:

bundle install

3. Create the database and run migrations:

• Configure your database settings in config/database.yml.
• Set up environment variables for secure operation in config/secrets.yml.

rails db:create
rails db:migrate

4. Start the rails server:

rails s

Docker Installation

The quickest way to get CipherSwarm up and running is to use Docker. The following steps will guide you through the process:

1. Clone the repository to your local machine:

git clone
cd CipherSwarm

2. Deploy the Docker containers:

docker compose -f docker-compose-production.yml up

3. Access the CipherSwarm web interface at http://localhost:3000.
4. Log in with the default admin credentials (username: admin, password: password) and change the password immediately.

Usage

1. Access the CipherSwarm web interface at http://localhost:3000.
2. Log in with the default admin credentials (username: admin, password: password) and change the password immediately.
3. Add nodes to your network through the interface.
4. Create new cracking tasks, specifying the hash types and input files.
5. Monitor the progress of your tasks in real-time through the dashboard.

Architecture

CipherSwarm is built on a modular architecture that separates task management, node communication, and hash cracking processes. This design allows for easy scaling and customization.

Data Concepts

In the CipherSwarm system, the process of managing hashcat cracking jobs is structured around four core objects: Campaigns, Attacks, Templates, and Tasks. Understanding these objects and their interrelations is key to effectively leveraging the system for distributed hash cracking.

Campaigns

A Campaigns represents a comprehensive unit of work focused on a single hash list. Each Campaign is designed to achieve a specific goal, such as recovering passwords from a set of hashes. A Campaigns may encompass multiple Attacks, each tailored to run against the Campaign's hash list using different strategies or parameters. Campaigns facilitate the organization and prioritization of attacks, allowing for sequential execution based on priority or effectiveness.

Attacks

An Attack is a defined unit of hashcat work characterized by its attack type and the word list and/or rules it employs. An attack embodies a specific approach to cracking hashes, such as brute force or dictionary attacks, complete with all necessary parameters. Large attacks can be subdivided into Tasks to distribute the workload across multiple Agents, enabling parallel processing and thus speeding up the cracking process.

Templates

A Template serves as a reusable definition of an attack. It specifies the attack type and parameters (such as word lists and rules) but is not bound to a specific hash list. Templates allow for the rapid configuration of new attacks by applying a pre-defined set of strategies to different hash lists and types. This abstraction facilitates the quick adaptation to new cracking challenges without the need for reconfiguration from scratch.

Tasks

The Task is the smallest unit of work within the system, representing a segment of an Attack that an individual Agent is tasked with processing at any given time. Tasks are the fundamental work packets distributed to Agents in the network, allowing for the division of a larger attack into manageable pieces. This division not only enhances efficiency through parallel processing but also allows for dynamic load balancing across the network of Agents.

Contributing

We welcome contributions from the community! Please refer to the CONTRIBUTING.md file for guidelines on how to get involved.

1. Fork the repository.
2. Create a new branch (git checkout -b feature-branch).
3. Commit your changes (git commit -am 'Add some feature').
4. Push to the branch (git push origin feature-branch).
5. Create a new Pull Request.

Going forward, all commit messages should adhere to the Conventional Commits. This convention ensures that the commit history is clear, concise, and easy to follow.

Acknowledgments

• We would like to acknowledge the Hashtopolis team for inspiring us and providing us with the Hashtopolis Communication Protocol v2 documentation.
• Our sincere thanks to Hashcat for their incredible cracking tool.
• Thank you to the Ruby on Rails community for their guidance and support.
• Special thanks to our contributors for their valuable input and feedback.