This repository provides a high-performance PowerShell pipeline to transform the raw NetNTLMv1 Rainbow Tables (released by Mandiant) into an optimized, "Perfect" Compact (.rtc) format.
By converting the original .rt files, we achieve:
- ~40% Reduction in Disk Space (Crucial for a multi-TB dataset).
- 0% Chain Collisions: Using the
-p(Perfect) flag ensures every chain is unique. - Instant Compatibility: Pre-sorted and ready for
crackalack_lookupwithout further processing.
This repository (or torrent) provides a reformatted version of the Rainbow Tables released by Mandiant (Google Cloud). The original dataset was published to accelerate the deprecation of the Net-NTLMv1 protocol by making hash collisions easily demonstrable for security professionals.
The work of Mandiant (Google Cloud) is licensed under the Creative Commons Attribution 4.0 International (CC BY 4.0).
- Original Author: Mandiant (Google Cloud).
- Original Source:
gs://net-ntlmv1-tables/. - Official License Link: https://storage.googleapis.com/net-ntlmv1-tables/LICENSE.
- Full License Terms: Creative Commons CC BY 4.0.
Note on Redistributions: Under the CC BY 4.0 license, you are free to share, copy, and redistribute the material in any medium or format, and to adapt, remix, or build upon the material for any purpose, provided you give appropriate credit.
The original data and research were provided by Mandiant (Google Cloud). This project builds upon their work to make these tables more accessible for security auditors.
- Reference: Mandiant Blog: Net-NTLMv1 Deprecation
- Data: Google Research
- Engine: jtesta/rainbowcrackalack (Original GPU)
- Logic: blurbdust/rainbowcrackalack (NTLMv1 Support)
- Implementation: Project-rainbowcrack ( rtsort & rt2rtc)
- Type: NetNTLMv1 (DES-based)
- Charset:
byte#7-7 - Chain Length: 134,217,668
- RTC Parameters:
-s 32 -e 48 -p - Software: Optimized for RainbowCrack 1.8+
- Download: Pulls
.rtfrom Mandiant G-Storage. - Sort: Runs
rtsort.exeto index endpoints. - Compact:
rt2rtc -s 32 -e 48 -p(Removes duplicates). - Clean: Moves
.rtcto final storage, deletes.rtsource.
- uncompress everything so that look like this:
- edit the file rtc-pipline.ps1 and change all the need paths
- run the rtc-pipline.ps1 and wait (a long time!) make sure you have enough space!
.\crackalack_lookup.exe .\rtc a9d83c6ca210be62- Download: Get the files via the Magnet link.
- Setup: Place all
.rtcfiles in a folder (FOLDER value). - Crack: Run
crackalack_lookupagainst your captured hash (CT1 or CT2 value):.\crackalack_lookup.exe FOLDER CT1 (or CT2)
duy31-mandiant-ntlmv1.mp4
The full dataset is massive. I am hosting a Public Torrent of the compacted .rtc files.
Magnet Link: magnet:?xt=urn:btih:TO_BE_ANNONCE&dn=NetNTLMv1_Perfect_RTC
Important
A Call to Action: I will seed this for as long as possible, but I need the community to help. If you have spare storage (NAS/Servers) and high bandwidth, please keep this torrent active. The more people seed, the faster and more permanent this resource becomes for everyone. "A Rainbow Table is only as strong as its Seeding Swarm." > If you find this data useful for your audits, please Give Back by Seeding.
Current status of the conversion and seeding:
- Index 0-1000 — Seeding 🚀
**🧲 - Copy/Paste Magnet Link:
magnet:?xt=urn:btih:0bf8239b4483536739bab75e312e4e3f3be8f7b7&dn=0-1000&xl=1342416684388&tr=udp%3A%2F%2Ftracker.moeking.me%3A6969%2Fannounce&tr=https%3A%2F%2Ftracker.nanoha.org%3A443%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.armun.net%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Ftracker.theoks.net%3A6969%2Fannounce
- Index 1001-2000 — Seeding 🚀
**🧲 - Copy/Paste Magnet Link:
magnet:?xt=urn:btih:31731bd4fb93a1771b1a300b20ee87bc951b9a63&dn=1001-2000&xl=1341075609150&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.theoks.net%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.moeking.me%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.armun.net%3A6969%2Fannounce&tr=https%3A%2F%2Ftracker.nanoha.org%3A443%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969%2Fannounce
- Index 2001-3000 — Seeding 🚀
**🧲 - Copy/Paste Magnet Link:
magnet:?xt=urn:btih:2de621588b018c5239d96e6b4e88f21f2350edfa&dn=2001-3000&xl=1341075634420&tr=udp%3A%2F%2Ftracker.armun.net%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.moeking.me%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.theoks.net%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=https%3A%2F%2Ftracker.nanoha.org%3A443%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969%2Fannounce
- Index 3001-4095 — Seeding 🚀
**🧲 - Copy/Paste Magnet Link:
magnet:?xt=urn:btih:acc14924b4892e87b94ffaa8f9c60ca263f30973&dn=3001-4095&xl=1468477884160&tr=udp%3A%2F%2Ftracker.moeking.me%3A6969%2Fannounce&tr=https%3A%2F%2Ftracker.nanoha.org%3A443%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.theoks.net%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.armun.net%3A6969%2Fannounce&tr=udp%3A%2F%2Fexodus.desync.com%3A6969%2Fannounce
By using this project, you agree to use it only for authorized security auditing. The authors assume no liability for misuse or illegal activities.