card-img

Rainbow Table & Hash Set Collection

This product is an internal NVME M2 4TB hard drive (manufacturer may vary) which has copies of a number of different rainbow tables and hash sets from various external sources and several generated by PassMark.

Price: $900.00 (Price excludes shipping)

buy now

This can be used in conjunction with OSForensics for password recovery and quickly identifying known safe files (such as operating system and program files) and suspected malicious files (viruses, trojans, script files).

The actual rainbow tables and hash sets are available from a number of sources for free however the entire collection is very large (approximately 3.1TB). See the Free Download Locations section for more information about the external sources for the tables.

Included Rainbow Tables

Rainbow tables are tables of plain text passwords and hashes. They allow a password to be quickly looked up if a hash for that password is known. For more information on using rainbow tables can be in the password recovery tutorial. These tables are in RTI1/2 formats.

Name Description Size Source
md5_loweralpha-numeric MD5, lower case 1-7 characters (a-z 0-9) 73 MB PassMark
lm_alpha-numeric LM Hash, upper case 1-7 characters (A-Z 0-9) 180 MB PassMark
sha1_loweralpha-numeric SHA1, lower case 1-7 characters (a-z 0-9) 57 MB PassMark
LM & Half LM* 5 tables, various alpha numeric combinations, 1-7 characters long 600 GB FreeRainbowTables**
MD5 13 tables, up to 12 characters long with various alpha numeric combinations 1.18 TB FreeRainbowTables**
MYSQLSHA1 2 tables up to 12 characters long with various alpha numeric combinations 167 GB FreeRainbowTables**
NTLM* 12 tables, up to 12 characters long with various alpha numeric combinationss 818 GB FreeRainbowTables**
SHA1 4 tables, up to 12 characters long with various alpha numeric combinations 97.3 GB FreeRainbowTables**

*HalfLM, NTLM and hybrid tables are not currently compatible with OSForensics but can be used with other rainbow table software.
**FreeRainbowTables is no longer online.

Included Hash Sets

Hash Sets are used in a data analysis technique called Hash Analysis, which uses the MD5, SHA1 and SHA256 hash of files to verify the files on a storage device. A hash uniquely identifies the contents of a file, regardless of filename and can be used to identify the presence of malicious, contraband, or incriminating files such as bootleg software, pornography and viruses. See this video of hash sets in use in OSForensics.

Name Description Size Source
KeyLoggers Collection of keyloggers 1.14 MB PassMark
Office 2007 Enterprise (Vista) Office 2007 files (Windows Vista 32bit) 3.87 MB PassMark
Office 2007 Enterprise (Win7) Office 2007 files (Windows 7 32bit) 5.22 MB PassMark
Vista Business (32-bit) Windows system files 19.7 MB PassMark
Vista Business (x64) Windows system files 19.7 MB PassMark
Win7 Enterprise (x64) Windows system files 26.4 MB PassMark
Win7 Ultimate (32-bit) Windows system files 40.8 MB PassMark
XP Professional (32-bit) Windows system files 4.92 MB PassMark
XP Profesional (x64) Windows system files 4.10 MB PassMark
Win10 Home (x64) Windows system files 58.7 MB PassMark
Win11 Pro 24H2 (x64) Windows system files 95.4 MB PassMark
NSRL 2.34 October 2011 Includes original NSRL data in CSV format and OSForensics conversion 19.5 GB NSRL
NSRL 2.44 April 2014 OSForensics conversion 20.3 GB NSRL
NSRL 2.52 June 2016 OSForensics conversion 29.0 GB NSRL
NSRL 2.55 December 2016 Modern OSForensics conversion 17.6 GB NSRL
NSRL 2.59 December 2017 Modern OSForensics conversion 19.8 GB NSRL
NSRL 2.71 December 2020 Modern OSForensics conversion 15.5 GB NSRL
NSRL 2.75 December 2021 Modern Minimal OSForensics conversion 12.7 GB NSRL
NSRL 3 June 2023 Modern Minimal OSForensics conversion 12.5 GB NSRL
NSRL 3 June 2023 Legacy Minimal OSForensics conversion 9.22 GB NSRL
NSRL 3 June 2023 IOS Minimal OSForensics conversion 3.73 GB NSRL
NSRL 3 June 2023 Android Minimal OSForensics conversion 5.17 GB NSRL
NSRL 3 Mar 2024 Modern Minimal OSForensics conversion 14.9 GB NSRL
NSRL 3 Mar 2024 Legacy Minimal OSForensics conversion 9.68 GB NSRL
NSRL 3 Mar 2024 IOS Minimal OSForensics conversion 4.17 GB NSRL
NSRL 3 Mar 2024 Android Minimal OSForensics conversion 5.39 GB NSRL
NSRL 3 Mar 2025 Modern Minimal OSForensics conversion 15.4 GB NSRL
NSRL 3 Mar 2025 Legacy Minimal OSForensics conversion 10.0 GB NSRL
NSRL 3 Mar 2025 IOS Minimal OSForensics conversion 4.71 GB NSRL
NSRL 3 Mar 2025 Android Minimal OSForensics conversion 5.39 GB NSRL

Software

Also included on the disk are trial versions of OSForensics and WirelessMon and these free utilities;

Free Download Locations

Please note the rainbow tables were downloaded from a source that is no longer available online. The hash sets are available for free from the National Software Reference Library, and there is a OSForensics tutorial on how to convert them for use within OSForensics. Please note that conversion may take several days.

The hash sets and rainbow tables created by PassMark are also available from the OSForensics Download page. We are not selling the tables, only the service of copying them onto a drive and shipping.