Lateral Movement in Active Directory from Windows
Pass the Hash (PtH)
A Pass the Hash (PtH) attack is a technique where an attacker uses a password hash instead of the plain text password for authentication.
- Pass the Hash with Mimikatz (Windows)
- Pass the Hash with PowerShell Invoke-TheHash (Windows)
- Pass the Hash with Impacket (Linux)
- Pass the Hash with CrackMapExec (Linux)
- Pass the Hash with evil-winrm (Linux)
- Pass the Hash with RDP (Linux)
- UAC Limits Pass the Hash for Local Accounts