Net-NTLMv1: The Easy Path for Red Teamers

Nic Losby (blurbdust)

Burning River Cyber Con

November 15, 2025

SlidesNTLMv1 · Red Team · Password Cracking

November 15, 2025

Slide deck

View inline above or open in a new tab for your browser's PDF viewer.

View in new tab Download PDF

Speaker

Nic Losby (blurbdust)

Senior Consultant, Mandiant Offensive Security

Nic Losby is a Senior Consultant on the Mandiant Offensive Security Services (OSS) Red Team. Over six years Nic has performed dozens of pentests and red-team operations and is a subject-matter expert in internals, password auditing, embedded devices, and offensive tooling. Nic publishes tools and research to help practitioners conduct more effective offensive assessments and to surface defensive gaps.

Talk overview

This session explains the project's background, the engineering challenges of building distributed rainbow tables at scale, and the practical implications for pentesters and red teams. Attendees will learn where to obtain the tables, trade-offs when using them, and methods for checking whether NTLMv1 is present in an environment.

Share

Share this talk with your crew or on social.

Share on X Share on Bluesky