Release v0.7.0

Features

• Tasks which are recognized containing large rule files and not giving good benchmarks result in splitting into subtasks
• Most of the tables can now be easily ordered and searched with the datatables plugin
• Agent Errors can be handled better
• New User API allowing access to all functions without the webinterface via simple JSON commands.
• Added new filetype (Other) for all non rules/wordlist files like hashcat charsets etc.
• File types can be edited of existing files.
• Tasks can now be archived instead of being deleted.

Enhancements

• Width of the container is increased to have more space on large screens.
• Standard buttons have now icons instead of text to use less space.
• Hashcat is configured already as crack to make it easier for users to get started.

Bugfixes

• Using correct function to get superhashlistId on zapping from webinterface.
• Zapping from the website will now also issue zaps for non-salted hashlists.
• Fixed zapping querying on progress sending from agent to also match for agent null values.

Release v0.6.0

Features

• Added autofocus for login field
• Added fine grained permission management
• Updated Bootstrap and jQuery to newest versions
• Added Icons instead of images

Bugfixes

• Export of founds of binary hashlists fixed
• DB Connection check during installation is now tested correctly

Release v0.5.1

Bugfixes

• Fixed missing file assignments when applying preconfigured tasks from hashlists view (issue #354)
• Fixed cracker binary relation error when applying supertasks from hashlist view
• Fixed XSS vulnerability with the login forward variable
• Session cookies have the httpOnly flag set
• Fixed file upload which allowed upload of file:// data and reading it
• Fixed renaming of files which allowed renaming them to other directories and execute them
• Fixed renaming/uploading of files which allowed to override hidden files (e.g. .htaccess file)

Release v0.5.0

Large Update

• Complete task management backend rewritten
• Improved performance when handling cracked hashes
• Added Groups for more detailed access control
• Including new python client
• Compatibility with generic crackers
• More configuration options added
• Cracker version management changed

New Features

• Tasks now have a cracks per minute performance based on total spent time

Bugfixes

• Fixed dependency problem on user deletion
• Fixed issue when agents got deleted which had completed at least one chunk
• Fixed conflicts on $_POST data agent vs. agentId
• Fixed ETA and spent time for tasks
• Error message which was always shown when adding new hash types fixed

Release v0.5.0 RC1

Large Update

• Complete task management backend rewritten
• Improved performance when handling cracked hashes
• Added Groups for more detailed access control
• Including new python client
• Compatibility with generic crackers
• More configuration options added
• Cracker version management changed

Bugfixes

• Error message which was always shown when adding new hash types fixed

Please note

Due to a current change of Hashcat 4.1.0 in relative paths on windows, Hashcat 4.1.0 on windows can currently NOT be used with Hashtopolis. Lower versions and other operating systems should run without problems.

Release v0.4.3

New Features

• Added telegram bot notification
• Supertasks can now also be applied when viewing hashlist details (similar to preconfigured tasks)

Bugfixes

• Notification display fixed
• Updated problem where agents were looping when tasks go over 100%

Technical

• Fixed warnings during found import
• Fixed edge case where it could happen that agents started to loop after a task when no new task was available
• Pre-crack import warns when too long plaintexts are in the import file
• Implemented missing ownAgentError notification execution

Release v0.4.2

New Features

• Supertask imports can now be set to be small tasks for every subtask

Bugfixes

• Fixed broken agent download

Technical

• Typos in constants fixed
• Tasks can also be deleted from the detailed view
• Fixed update to 0.4.0 when adding taskType column
• Supertasks are getting default priority from the subtasks
• Fixed DBA issue with handling invalid input
• Fixed additional vulnerabilities reported

Release v0.4.1

Bugfixes

• Various vulnerabilities (CVE-2017-11680, CVE-2017-11681, CVE-2017-11682) fixed, see issue #241

Technical

• Improved code handling, constants can be used in templates.

Release v0.4.0

New Features

• Renewed status page, gives now JSON formatted information which can be parsed however the user wants to.
• added search page to search for hashes and plains
• '-r' is now automatically prepended when selecting rule files on task creation
• added help page with some helpful links
• Left hashlists can be downloaded now
• Added Yubikey OTP login
• Supertasks added
• HCmask style can be imported

Technical

• DB connection details now are stored in a file which is not in repository (a template is provided instead). This avoids conflicts on updates in inc/load.php
• Hash length is increased to 1024 (old 512)
• Added special case when handling pre-crack import of WPA as they are not matched via the hash but the ESSID instead.
• Added new hashtypes from Hashcat
• Server hostname can be overridden in config

Client

• Client updated to version 0.43.19
• Fixed debug not showing hashcat parameters on calls
• Improve error handling on keyspace measuring, client will now signal the server to pause agent instead of crash
• Added more information for task assigning, client will now display task and hashlist on task get
• Fixed slow file downloading issue
• Changed the way hashcat version is queried (should work properly on linux/mac)

Release v0.3.2

Client

• Client updated to version 0.43.13

Client updates:

• Added support for rejected variable from hashcat 3.5.0 (backwards compatible)
• Adjust TLS and SSL3 flags for better compatibility on strict enforcement
• Added hashcat update checks between chunks (no client restarts needed)
• Prettify the status outputs and display more information between tasks
• Fixed a crash/loop when multiple cracks in WPA
• Adjusted the way hashcat binary is queried for the version
• Increased json processing limit to 2GB streams

Bugfixes

• fixed not sending notifications when using pre-task creation from hashlist details view
• 'Delete Finished' button now deletes also tasks of hashlists which are completely cracked
• on user deletion depending sessions now also get deleted
• fixed problems on task assignment where priorities were compared wrong
• clear all doesn't fail anymore when task list is empty
• fixed problem that on small tasks multiple agents got assigned and assignments were deleted immediately
• fixed issue that some agents suddenly got a very large chunk

Features

• Added possibility to change isCpuOnly and isSmall on tasks after creation

Technical

• removed old installation code which was used to upgrade Hashtopus to Hashtopussy 0.1.0
• reduced size of task progress image