February 2018
Intermediate to advanced
396 pages
9h 38m
English
Pass the credential is a simple and easy technique to discover an NTLM hashed password, without the pain of cracking it using a great deal of computing power. Although Windows doesn't support passing the hash via networks, you can try Pass-the-Ticket (PtT) technique as a penetration tester, which is the process of grabbing a ticket and using it in a non-legitimate way. This graph show the NTLM authentication flow:

Read now
Unlock full access