• Environment
• CrackerJack
  • Clone Source Code
  • Virtual Environment
    • Permissions
    • Crontab
  • Run Locally
  • Configuration
• System Service
  • Service Variables
  • systemd
• Web Server
  • Virtual Host Variables
  • SSL Certificates
  • Apache
  • nginx
• .hashcat Directory

Environment

CentOS 8

sudo dnf install epel-release
sudo dnf install git screen sqlite policycoreutils-python-utils

CentOS 7

sudo yum install epel-release
sudo yum install git screen sqlite python-setuptools python-pip policycoreutils-python

CrackerJack

Clone Source Code

git clone https://github.com/ctxis/crackerjack

Virtual Environment

Navigate to the path you cloned crackerjack into, and run the following commands:

python3 -m venv venv    # You might need to change python3 to python3.6
. venv/bin/activate
pip install -r requirements.txt
flask db init
flask db migrate
flask db upgrade
deactivate

At this point you can run CrackerJack locally by following the instructions here.

Virtual Environment Permissions

Set owner to www-data

As the web server will be running under www-data, the application should be owned by that user.

sudo chown -R www-data:www-data /path/to/crackerjack

Crontab

This functionality is required to auto-terminate jobs when they exceed their allowed run time, and for general housekeeping.

Navigate to CrackerJack and run the following:

sudo -u www-data /bin/bash  # Login as www-data before executing the following commands.
. venv/bin/activate
flask crontab add
deactivate

Confirm that the job has been added by running:

crontab -l

Run Locally

You can also run CrackerJack locally without using Apache/nginx. Navigate inside the cloned directory and run (make sure you have installed the virtual environment following the instructions here):

. venv/bin/activate
export FLASK_ENV=development
export FLASK_APP=app
flask run

After the last command you should see something like:

(venv) $ flask run
 * Serving Flask app "app" (lazy loading)
 * Environment: development
 * Debug mode: on
 * Running on http://127.0.0.1:5000/ (Press CTRL+C to quit)
 * Restarting with stat
 * Debugger is active!
 * Debugger PIN: 182-315-751

To access CrackerJack navigate to http://127.0.0.1:5000/

CrackerJack Configuration

The first-time configuration is performed in the GUI - there is no need to change any files. When CrackerJack determines that there are zero users in the "users" table, it prompts you to create an administrator.

With regards to Flask and defining where the database file will be located, amongst other settings (like the SECRET_KEY), copy ./files/flask/config.py to ./data/instance/config.py and edit accordingly.

System Service

Create the following directory which will hold our service configuration file:

mkdir ./data/config/service

Service Variables

For all the following steps, replace these strings with its representative variables:

Variable	Replace With	Example
{{ webserver.user }}	User running the web server	www-data
{{ webserver.group }}	Group the user running the web server belongs to	www-data
{{ crackerjack.destination }}	Location you cloned CrackerJack to	/opt/crackerjack
{{ service.bind_address }}	Local address to bind application	127.0.0.1
{{ service.bind_port }}	Port to bind application	8888

systemd

Configuration File

Copy:

./setup/ansible/roles/service/templates/centos/systemd.j2

to

./data/config/service/crackerjack.service

Replace all the variables in that file following the variables section

Install and Enable Service

Now that you have your service file, run the following:

# Create a soft link between your configuration and the systemd folder.
sudo ln -s /absolute/path/to/data/config/service/crackerjack.service /etc/systemd/system/crackerjack.service

# Enable service
sudo systemctl enable crackerjack.service

# Start service
sudo systemctl start crackerjack.service

# Check service
sudo systemctl status crackerjack.service

Web Server

Create the following directory which will hold our service configuration file:

mkdir ./data/config/http

Virtual Host Variables

For all the following steps, replace these strings with its representative variables:

Variable	Replace With	Example
{{ crackerjack.domain }}	Domain CrackerJack will be accessible from	crackerjack.lan
{{ crackerjack.destination }}	Location you cloned CrackerJack to	/opt/crackerjack
{{ service.bind_address }}	Local address the application is running on	127.0.0.1
{{ service.bind_port }}	Port of local application	8888

SSL Certificates

If you have your own SSL certificates, put them in the following location:

./data/config/http/ssl.crt
./data/config/http/ssl.pem

You can also change the SSLCertificateFile and SSLCertificateKeyFile locations in the vhost.conf file.

If you want to generate self-signed certificates, use the following command (change the paths where appropriate):

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /absolute/path/to/data/config/http/ssl.pem -out /absolute/path/to/data/config/http/ssl.crt

Apache

Install

sudo yum install httpd mod_ssl

Configuration File

Copy

./setup/ansible/roles/webserver/templates/centos/apache/vhost.conf.j2

To

./data/config/http/vhost.conf

Replace all the variables in that file following the variables section

Additional Configuration

Make sure the following directories exist, and are owned by root.

sudo mkdir /etc/httpd/sites-enabled
sudo mkdir /etc/httpd/sites-available

Instruct Apache to load all virtual hosts from /etc/httpd/sites-enabled.

# Edit /etc/httpd/conf/httpd.conf
sudo vim /etc/httpd/conf/httpd.conf

# Insert the following line at the bottom of the file
IncludeOptional sites-enabled/*.conf

Enable Site

# Link file to sites-available
sudo ln -s /absolut/path/to/data/config/http/vhost.conf /etc/httpd/sites-enabled/crackerjack.conf

nginx

Install

sudo yum install nginx

Configuration File

Copy

./setup/ansible/roles/webserver/templates/centos/nginx/vhost.conf.j2

To

./data/config/http/vhost.conf

Additional Configuration

Make sure the following directories exist, and are owned by root.

sudo mkdir /etc/nginx/sites-enabled
sudo mkdir /etc/nginx/sites-available

Instruct Apache to load all virtual hosts from /etc/httpd/sites-enabled.

# Edit /etc/nginx/nginx.conf
sudo vim /etc/nginx/nginx.conf

# Insert the following line in the http {} section.
include /etc/nginx/sites-enabled/*.conf;

Copy the proxy_params file to /etc/nginx:

sudo cp /absolut/path/to/setup/ansible/roles/webserver/templates/centos/nginx/proxy_params.j2 /etc/nging/proxy_params

Enable Site

# Link file to sites-enabled
sudo ln -s /absolute/path/to/data/config/http/vhost.conf /etc/nginx/sites-enabled/crackerjack.conf

# Restart nginx

Firewall

CentOS 8

To enable http/https ports on CentOS run the following:

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo firewall-cmd --reload

In order for the proxy to work, you will also need the following setting:

sudo setsebool -P httpd_can_network_connect 1

.hashcat directory

If you have installed hashcat from source, you will need to create a ".hashcat" within the www-data user's home folder.

To identify the folder, run:

eval echo ~www-data

Which will result in something like

/var/www

If /var/www doesn't exist it means that neither nginx or apache are installed.

Now create the folder and set the right owner.

sudo mkdir /var/www/.hashcat

or

sudo mkdir $(eval echo ~www-data)/.hashcat

Set permissions

sudo chown -R www-data:www-data /var/www/.hashcat