Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20250415025318.GA29197@openwall.com>
Date: Tue, 15 Apr 2025 04:53:18 +0200
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Integration of JtR with Hashtopolis - Issue with --keyspace Command

On Tue, Apr 15, 2025 at 07:18:58AM +0530, Pentester LAB wrote:
> I’ve successfully compiled John the Ripper (JtR) and integrated it with
> Hashtopolis. However, when executing tasks, Hashtopolis is trying to use
> the --keyspace command, which JtR doesn’t support. This causes issues in
> task execution.
> 
> Is there a solution or recommended approach to run JtR commands in
> Hashtopolis, including distributing tasks across agents, without triggering
> the --keyspace command?

No, there is not.

Hashtopolis is effectively for hashcat only.  There is documentation of
what it expects from a password cracker, but I'm not aware of any other
password cracker (besides hashcat) supporting those options yet.  We're
talking about --keyspace, --limit, --skip.

It might be possible to replace the need for --keyspace by (different)
usage of JtR's --node option, by allocating a huge number of virtual
nodes and using them as portions of work rather than actual nodes.
I did this with my own Perl scripts used in contests 10+ years ago.

--limit may be same or similar to our --max-candidates option.

We do not have an equivalent of --skip, but I think I saw code in
Hashtopolis itself where it'd simply use the "head" and "tail" commands
instead of --limit and --skip.

Someone very familiar with Hashtopolis (which I've never used) may make
an attempt at proper integration with JtR and let us all know.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.