DEV Community

Mark0
Mark0

Posted on

NetNTLMv1 Is Dead. Long Live NetNTLMv1.

The security industry recently saw the release of optimized NetNTLMv1 rainbow tables, which significantly lower the barrier for recovering NT hashes from NetNTLMv1 responses. This research introduces the ntlmrain toolset and the GRTB table format, which compresses the original 8 TiB Google dataset into a lossless 3.63 TiB collection. This optimization allows the entire table set to fit on a standard 4 TB consumer disk while maintaining fast lookup speeds through a global index and adaptive 4 KiB paging.

The project includes a WebGPU-powered browser interface, a central lookup service, and a native command-line client. By leveraging WebGPU, the browser can perform heavy precomputation and candidate verification locally on the user's GPU, ensuring that sensitive data like recovered DES keys never leave the client environment. These tools provide a cost-effective and portable alternative to traditional FPGA-backed cracking services, proving especially useful when auditing legacy environments, NAS storage, or Wi-Fi systems still utilizing MS-CHAPv2.


Read Full Article

Top comments (0)