Add support for user-uploaded rule files, UI cleanup.

[bzekanovic]

Hello,

Couple of things that would be very helpful with NPK.

1. Allow users to upload their own rule files.
2. Allow users to add additional Hashcat arguments for specific campaign.
3. Within the UI show helpful messages for end users. These messages can be embedded within helpful links next to the feature. This would eliminate you guys having to maintain additional docs.
4. The progress bar should show some kind of descriptive text based on the color (yellow, blue, green).

[blincoln-bf]

In particular, the --hex-salt option would make it possible to crack a number of additional hash types.

[c6fc]

Custom arguments and mask options are added in 874b074.

I like the idea of allowing users to upload rule files, but it likely won't make it into v2 to be honest. There's a lot built around the current design, and it will likely take a lot of effort to get this feature in. I'll see what I can do though.

I've been adding lots of tooltips all over the place to help with 3, and I hope to get 4 in as a part of the final polish before shipping v2 to master.

[ArchitektApx]

Regarding the UI Cleanup part:

Currently no error prompt is shown to the user if the password used in a password change does not comply with password policies and the process seems to be "stuck". The error message is just visible in the console.

Some kind of prompt visible to the user would be helpful I think

[c6fc]

Added user login errors in the password reset page to address @ArchitektApx 's comments. New in f2ca237

[c6fc]

Consider adding a link to the password reset email for quality of life.

[bfnserra]

I use NPK on many engagements and this is a great tool, thanks a lot for your hard work !

• +1 for uploading our own rule file (as a non-admin user). For instance, I recently needed to use the toggles-lm-ntlm rules from Didier Stevens.
• Also, uploading our own wordlist as a non-admin user could be really useful. For instance, when we want to run jobs with company-based patterns or if we already obtained cleartext passwords from other locations.