July 23, 2017 / by Casey & Hans
Major Changes at a Glance
1) Distributed cracking!
2) Smart wordlists
3) Hashview Hub
4) More analytics
5) Additional Support for more hashes
We had to make significant changes to handle distributed queuing which took us a bit longer. We have an API for remote agents and distributed support is painless.
Install Hashview as normal, install Hashview Agent on a remote box and join it to the cluster via API. Checkout the Hashview Agent for more details.
In an effort to improve your cracking results, we’ve taken our first stab at creating dynamic wordlists. These wordlists are a unique set of all plaintext words generated in hashview, both in the database, as well as for all wordlists. This wordlist is constantly updated and is supported like traditional wordlists (i.e. you can use rules with them) (detailed blog on how this works to follow)
Hashview Hub is a free optional service that allows you to search our cloud based service for matching hashes that have already been cracked. As of this blog post Hub contains over 350 million hashes. To enable this service, look under the Manage -> Global Settings -> Hashview Hub. For your privacy, Hashview will only upload cracked hashes to the hub service if YOU want, and will NEVER send usernames, customer names, or any other identifiable information.
We keep adding more popular analytics. This release we have the following:
how many passwords meet complexity requirements
what are the most frequently used masks
a list accounts/hashes containing extremely weak passwords
Additional Supported Hash Types
The following hash types have been added
HMAC-SHA256 (key = $pass)
HMAC-SHA256 (key = $salt)
GOST R 34.11-94
Apache $apr1 MD5
HMAC-SHA512 (key = $pass)
HMAC-SHA512 (key = $salt)
iSCSI CHAP authentication
Cisco-IOS type 4 (SHA256)
Samsung Android Password/PIN
OSX v10.8+ (PBKDF2-SHA512)
IPMI2 RAKP HMAC-SHA1
WBB3 (Woltlab Burning Board)
+Lotus Notes/Domino 5
Lotus Notes/Domino 8