Go to releases
page, and go ahead download the appropriate version and install it.
Currently we support cracking hashes from following algorithms:
md5
sha256
sha512
But the list will be easily extended in the future, as we can support any given algorithm, implemented in the crypto
node library.
The app itself makes use of following jobs:
- Cracking using
wordlist
(currentlyrockyou.txt
supported) - Cracking using
bruteforce
- cracking each possible combination (until the backend-set up limits come)
- Distributes the tasks using sockets and it distributes them evenly
- Each job has a timeout (By default 1 minute) and in case of not returning the job, the master server unassigns the job
- Each client has a lifecheck ping command, that executes every interval that is specified in the master parameters
- Master server is protected against not real submissions, as it verifies the submitted solution coming from a client
- Encryption of traffic between the client and the server, so the messages cannot be hand-crafter nor manipulated as they would be verified on backend side.
- Potential issue might be connected with the decryption/encryption time extended for each message. However the issue might be mitigated with lowering the rate of messages flow by making the jobs larger.
- Distributing the same job
N
times based on number of logged users, so multiple verifications are performed. - Potential issue might be that single session of cracking a password would take approximately
N
times longer, but that wouldn't be a problem in case of lots of clients - Potential issue might be that a malicious actor can make a simulation of multiple users connecting, an example mitigation for this, would be to limit clients per IP on the backend, but wouldn't solve the issue completely.