🔗 NTLMRain web lookup
🔗 NTLMRain CLI tool on GitHub

Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and remote table lookup.

Blog: NetNTLMv1 Is Dead. Long Live NetNTLMv1.

Fitting lossless rainbow tables on a 4 TB disk and cracking NetNTLMv1 with WebGPU and ntlmrain.

Google’s release of the NetNTLMv1 rainbow tables made it much more practical to recover an NT hash from a NetNTLMv1 response captured with the fixed challenge 1122334455667788, further reducing the needed compute power.

NetNTLMv1 cracking is a problem I’ve kept returning to over the past several years. The recent table release prompted me to explore whether the process could be made cheaper, faster and easier to run. This post describes the result: a compact indexed table format, a WebGPU browser client and a native command-line tool.