Pass-the-Hash: One of the Most Prevalent Yet Underrated Attacks for Credentials Theft and Reuse

Abstract

The aim of this article is to bring some light into the following topics: what is Pass-the-Hash, what is the methodology of such an attack on a Windows based environment and what are the environment prerequisites needed for a successful attack. The report also discusses the methods, techniques and best practices of how and where to organize the defense.