PENTEST+ || Pass The Hash

Ricardo Varela Laredo

Hi there, I just viewed the PTH (Pass The Hash) episode and made some additional research about the topic. It is still not a 100% clear how to obtain the hash from the computer. I would like to confirm if the mentioned hash is, in fact, the local hash of the computer I'm using when connected to a regular LAN. Can you please provide additional details?

Thanks,
Ricardo

daniel-lowrie87

Greetings, @Ricardo-Varela-Laredo !

To obtain the hash from the TARGET, you just need to upload a hash stealing tool to the TARGET.

These tools include, but are not limited to...

Mimikatz
pwdump
fgdump

I typically use fgdump, as it is a stand-alone utility that doesn't need to be installed to work.
Just upload fgdump to the TARGET and then double-click on the file ON THE TARGET. This should create some text files, one of those files contains the users and their password hashes. Copy that file to your ATTACK machine. Now you can use that info for connecting back to the TARGET from your ATTACK machine using Pass-The-Hash techniques.

I hope that helps clear things up for you.

Cheers,
Daniel Lowrie