OSForensics Collection Rainbow Table & Hash Set

This product is an internal 3 TB SATA hard drive (manufacturer may vary) that contains copies of different rainbow tables and hash sets from various external sources and several generated by PassMark.

They can be used together with OSForensics to recover passwords and quickly identify known good files (such as program and operating system files) and suspected malicious files (viruses, trojans, script files).

The actual rainbow tables and hash sets are available from various sources for free, as seen in OSForensics, although the complete collection is very large (approximately 2.5 TB). See the Free Download Locations section for more information on external table sources.

Rainbow tables are tables of passwords and plain-text hashes. They allow quickly looking up a password if a hash for that password is known. For more information on using the rainbow password recovery tutorial. These tables are in RTI1.0 format.

[table id=7 /]

Hash sets are used in a data analysis technique called hash analysis, which uses the MD5, SHA1, and SHA256 file hashes to verify files on a storage device. A hash uniquely identifies a file's content, regardless of the file name, and can be used to identify the presence of malicious, contraband, or incriminating files, such as pirated software, pornography, and viruses.

[table id=8 /]

Software

Trial versions of OSForensics and WirelessMon and these free utilities are also included on the disk;

DiskCheckup

OSFClone

OSFMount

RamMon

Hard Drive Compatibility

There are issues using large hard drives on older Windows machines. The rainbow table drives are formatted with what is known as GPT (GUID Partition Table) format. This is necessary since the older MBR partition format cannot handle drives over 2 TB. Older computers will have problems with large hard drives. Windows XP and Windows 2000 are incompatible with this drive, for example! Older BIOS may also not recognize the full drive capacity. While BIOS limitations can sometimes be avoided using a USB base with the hard drive, you should verify compatibility with your motherboard and operating system before purchasing.

Free Download Locations

Note that the rainbow tables (approximately 2.5 TB) were downloaded from a source that is no longer available online. The hash sets are available for free from the National Software Reference Library, with a download of approximately 1.7 GB, and there is an OSForensics tutorial on how to convert them for use within OSForensics. Note that the conversion may take several days.

Hash sets and rainbow tables created by PassMark are also available on the OSForensics downloads page. We are not selling the tables, only the service of copying them onto a 3TB hard drive and shipping them.