4 ms·
Raw NTLM, and yeah, it's not terribly fast, but it's relatively simple to get up to gigahashes a second (I've got a box that churns out 21 GH/s on raw NTLM). P
by Vendan 10y ago
Raw NTLM, and yeah, it's not terribly fast, but it's relatively simple to get up to gigahashes a second (I've got a box that churns out 21 GH/s on raw NTLM). Plus, it's not salted, so it's trivial to just grab every hash and crack them all at the same time. Just keep in mind that you are unlikely to get a raw NTLM unless you've pwned a machine. Network sniffing and spoofing will get you a NetNTLMv1 or v2, and they are much slower, and salted.
- walshemj 10y agoIts a known weakness working at British Telecom I had to (legaly) break into a clients systems and brute forcing NTLM was how I did it. I made sure I had sign off from a very very senior manager to ok this though I did not want to get on the wrong side of our internal security guys.
- Vendan 10y agoI'm basically outsource red team for a bunch of smaller companies, so I'm cracking NTLM, both NetNTLMv1/v2 and raw all the time.