Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. The application has two parts:
Agent Python client, easily customizable to suit any need.
Server several PHP/CSS files operating on two endpoints: an Admin GUI and an Agent Connection Point
Aiming for high usability even on restricted networks, Hashtopolis communicates over HTTP(S) using a human-readable, hashing-specific dialect of JSON.
The server part runs on PHP using MySQL as the database back end. Your MySQL server must be configured with performance in mind. Queries can be very expensive, and proper configuration distinguishes between a few milliseconds of waiting and disastrous multi-second lags. The database schema heavily profits from indexing. Therefore, if you see a hint about pre-sorting your hashlist, please do so.
The web admin interface is the single access point for all client agents. New agent deployments require a one-time password generated in the New Agent tab. This reduces the risk of leaking hashes or files to rogue or fake agents.
There are parts of the documentation and wiki that are not up-to-date. If you see anything wrong or have questions on understanding descriptions, join our Discord server at https://discord.gg/S2NTxbz.
To report a bug, please create an issue and try to describe the problem as accurately as possible. This helps us to identify the bug and see if it is reproducible.
To make the Hashtopussy project conform to a more politically neutral name, it was rebranded to "Hashtopolis" in March 2018.
Easy and comfortable to use
Dark and light theme
Accessible from anywhere via the web interface or user API
Server components highly compatible with common web hosting setups
File management for word lists, rules, ...
Self-updating of both Hashtopolis and Hashcat
Cracking multiple hashlists of the same hash type as though they were a single hashlist
Running the same client on Windows, Linux, and macOS
Files and hashes marked as "secret" are only distributed to agents marked as "trusted."
Many data import and export options
Rich statistics on hashes and running tasks
Visual representation of chunk distribution
User permission levels
Various notification types
Small and CPU-only tasks
Group assignment for agents and users for fine-grained access-control
Compatible with crackers supporting certain flags
Report generation for executed attacks and agent status