A multi-platform client-server tool for distributing Hashcat password cracking tasks across multiple computers.
Hashtopolis is a distributed password cracking platform that enables security teams to distribute Hashcat tasks across multiple computers from a central server. It solves the problem of managing large-scale password recovery operations by providing a web-based interface for task coordination, agent management, and result analysis. The system supports multiple platforms and offers fine-grained access control for teams.
Security professionals, penetration testers, and cybersecurity researchers who need to perform large-scale password cracking operations across distributed computing resources.
Developers choose Hashtopolis for its robust multi-platform support, fine-grained access control, and seamless integration with Hashcat. Its self-hosted nature and HTTP(S)-based communication make it usable in restricted network environments while providing comprehensive task management and monitoring capabilities.
Hashtopolis - distributed password cracking with Hashcat
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
The Python client runs identically on Windows, Linux, and macOS, enabling seamless distributed cracking across heterogeneous environments without modification.
Secret data and files are only distributed to trusted agents, and group assignments with permission levels provide precise access management for team-based operations.
Supports running multiple hashlists as a single unit, file management for wordlists and rules, and self-updating of both Hashtopolis and Hashcat components for minimal maintenance.
Web interface offers visual chunk distribution, detailed statistics on tasks and hashes, and report generation, enhancing oversight of large-scale cracking campaigns.
The README explicitly states that parts of the wiki are not up-to-date, which can complicate setup and troubleshooting for new users.
Requires MySQL with performance tuning and indexing, as improper setup leads to slow queries and multi-second lags, adding operational overhead.
Primarily supports Hashcat; while compatible with crackers supporting certain flags, it's not a universal distributed platform for other tools like John the Ripper.
Users must manage server updates, PHP dependencies, and agent deployments manually, increasing maintenance compared to managed or cloud-native solutions.