βeta

Hashbot is a forensic web tool to acquire and validate, over time, the status of an individual web page or web document.


Acquire: Insert the URL to acquire, select your favorite user agent (default is Firefox) and click on submit. Wait for creating process finish and download the zip archive.


Validate: Unzip the archive downloaded by the creation service, open the <code>-code.txt file and use the "Validate Info" section to fill in the validation form. Click on submit and wait for the server response.


For more information click on faq

Frequently asked questions

What is hashbot?

Hashbot is a forensic web tool to acquire and validate, over time, the status of an individual web page or web document.

Acquire

Follow these steps to acquire a web document:

  1. Insert the document's URL (ie: http://www.evilwebpage.com/image.jpg or http://www.evilwebpage.com/page.html) in the text input.
  2. Select your favorite user agent.
  3. Click on Submit. A captcha code will be required, for security reason.
  4. Wait for acquisition service finish and click on download to save the result.

Validate

Validation information are stored in the <keycode>-code.txt file in "Validate Info".

  1. Insert the keycode in "CODE" field.
  2. Insert the file hash chosing between MD5 or SHA1 in the "HASH FILE" field.
  3. Select the file hash type according with the hash type filled in the previous field.
  4. Click on Submit. A captcha code will be required, for security reason and wait for server response.

What should I have to acquire? Html page or other document type?

It depends by your acquisition purpose. Acquire a web page doesn't include the validation of any file linked in it (ie: images, embedded pdf and so on).

If you want to acquire an image displayed on web page, the best way is acquire both the image file and document who include it.

What is the .unk extension?

Hashbot reconize almost all file type. If recognition fails the standard .unk extension will be assigned to the file.

How can I trust your validation service?

Using an MD5 and SHA1 calculator calculate the file hash of the validating file (<keycode>.ext1) and of the header response (<keycode>-headers.txt) and compare them with the hash file used for the validation service.

Limitation

  • Max file size 4 MB per document.
  • 120 seconds to download the zip archive.

What does contain the zip archive

In the zip archive, downloaded after the acquisition process, are contained 3 files:

  • <keycode>-code.txt: it contains references for validation (code, MD5 and SHA1 hash file), the information about the acquired document and header file.
  • <keycode>-headers.txt: the header file. It contains the server response to the hashbot request.
  • <keycode>.ext1: the document acquired.

Server TimeZone

GMT+1.

Terms of Service

Hashbot is a web service provided as is, with no warranty. The site store the downloaded files processed by the acquire process just for 120 seconds, to give the time to the user to download it on his own hard drive. After this time, any file is permanently deleted from the server. No acquired documents are permanently saved by the site.

Hashbot store in his database the needed information to validate a previous acquisition.

Any other question?

The answer is always 42 :-)

[1] The file extention associated with the detected file type.