Sec Tips #9: Attacking Active Directory - Over Pass The Hash
In this video I demonstrate what else can be done if an attacker can gain access to a users NTLM hash by using a technique known as Over Pass The Hash. Using a users NTLM hash to request Kerberos tickets.
Rubeus: https://github.com/GhostPack/Rubeus
getTGT: https://github.com/SecureAuthCorp/imp...
Timestamps:
00:00 Introduction / Theory
2:31 Demo 1: Performing Over Pass The Hash on a Windows machine
9:07 Demo 2: Performing Over Pass The Hash on a Linux machine