Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG]: Agent running hashcat command twice #1065

Open
ZerkerEOD opened this issue Apr 26, 2024 · 2 comments
Open

[BUG]: Agent running hashcat command twice #1065

ZerkerEOD opened this issue Apr 26, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@ZerkerEOD
Copy link

Version Information

Hashtopolis: 0.14.2 commit d397e4b

Hashcat

6.2.6+813

Description

When running from Debian, it appears that the agent is starting two hashcat jobs reducing performance speed by over half with some overhead.

Benchmark run from the same binary hashtopolis placed on the box without hashtopolis running:
image

Here is a ps aux for hashcat with hashtopolis running (note it is running with a /bin/sh -c and just a ./hashcat.bin:
image

Here is the reported speed in hashtopolis:
image

@ZerkerEOD ZerkerEOD added the bug Something isn't working label Apr 26, 2024
@frenchbeard
Copy link

Hello @ZerkerEOD, a couple of things on what you showed :

  1. your ps output shows only a single task running, your 2 processes are respectively
  • sh -c [...] : the call to sh made by the hashtopolis agent, which isn't running hashcat, just waiting for the command to finish
  • ./hashcat.bin [...] : the actual process cracking stuff
    if you call it again using ps auxf, for example, you'll see your first process is just the call made by sh to haschat
  1. benchmarks are a best case scenario, running a BF type attack, and based on your command, you made a combination of dictionary and rules, which most of the time results in significant speed differences.

From what I can see, everything works as intended in what you showed, and if you wanna make sure, simply run the same commande as called by sh in your screenshot instead of benchmarking, to get your actual speed for the task at hand, not the best case scenario for a brute-force attack.

Another way to check would be through the agent log itself, it should display its current speed on stdout / its default log, depending on your setup, allowing you to confirm the agent sees the same cracking speed, and the check through my previous suggestion that the slowdown is expected, and due to the combination of wordlist and rules instead of BF.

@ZerkerEOD
Copy link
Author

Thanks for explaining that. Is there a reason that the agent doesn't run hashtopolis on it's own rather than spawning a process to spawn the process?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants