Which attack technique involves capturing a user's authentication hash and using it directly to authenticate to other systems without cracking the plaintext password?

Question

Accepted Answer

B. Pass-the-hash. Pass-the-hash is an authentication attack where the attacker captures an NTLM hash from memory (e.g., via Mimikatz) and uses it directly to authenticate to other Windows systems that accept NTLM authentication, without needing to crack the hash to recover the plaintext password. This is particularly effective in Windows environments where NTLM is still in use.

Which attack technique involves capturing a user's authentication hash and using it directly to authenticate to other systems without cracking the plaintext password?

Related Questions

Discussion