Pass-the-Hash Category

blog
4+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

Pass the Hash blog

Filters

  • CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes
    windows

    CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes

    Use CredNinja to validate passwords and NTLM hashes via SMB, find local admin, perform Pass-the-Hash and user hunting, and reduce lockouts with stripe and delay.

    Discover more Discover more
  • Lateral Movement in Active Directory: Techniques, Tools and OPSEC
    windows

    Lateral Movement in Active Directory: Techniques, Tools and OPSEC

    A guide to lateral movement in Active Directory: Pass-the-Hash, Kerberos, SMB, WMI, WinRM, and RDP with prerequisites, artifacts, detection, and mitigations.

    Discover more Discover more
  • NTLM: Protocol, Hash Capture, Pass-the-Hash and Relay on Active Directory
    windows

    NTLM: Protocol, Hash Capture, Pass-the-Hash and Relay on Active Directory

    NTLM explained from top to bottom: handshake, capture, NetNTLMv2 with Responder, Pass-the-Hash, coercion, and CVE 2026 enabled. NTLM vs. Kerberos decision point in the enterprise pentest.

    Discover more Discover more
  • Port 5985 WinRM: Evil-WinRM, Pass-the-Hash, and PowerShell Remoting
    networking

    Port 5985 WinRM: Evil-WinRM, Pass-the-Hash, and PowerShell Remoting

    Port 5985 exposes WinRM over HTTP, the Microsoft service used by PowerShell Remoting. Learn about enumeration, access with Evil-WinRM, Pass-the-Hash, lateral movement, and hardening in Active Directory environments.

    Discover more Discover more