Authentication & Authorization

Pass-the-Hash Attack

English

Overview

An attack that bypasses authentication using a stolen password hash directly, without needing to know the plaintext password.

Details

Exploiting mechanisms such as Windows NTLM authentication, where the server validates a hash value, an attacker presents a stolen hash as-is to impersonate the user. It's a common technique for lateral movement from a compromised machine to other systems.

More Security terms