pass-the-hash

You can perform lateral movement in Active Directory by authenticating to network services using stolen NTLM hashes. This Skill leverages tools like Impacket and NetExec to execute commands across the domain without needing to crack the original plaintext password.

Yes, you can use Kerberos tickets or AES keys for lateral movement to minimize detection. This Skill prioritizes OPSEC-safe Kerberos authentication methods like Pass-the-Ticket and Over-Pass-the-Hash over direct NTLM authentication to reduce security alerts.

Pass-the-Hash authenticates directly using an NTLM hash, whereas Over-Pass-the-Hash uses an NTLM hash to request a Kerberos ticket. This Skill supports both techniques but prioritizes Over-Pass-the-Hash to maintain better OPSEC during lateral movement.

Yes, this Skill relies on credential manipulation tools including Impacket, Rubeus, mimikatz, and evil-winrm. These dependencies provide the necessary frameworks to execute Pass-the-Hash, Pass-the-Key, and Pass-the-Ticket attacks in Active Directory.

The best way to authenticate using an AES key is through the Pass-the-Key technique. This Skill facilitates Pass-the-Key attacks by utilizing tools like Rubeus to request Kerberos tickets, enabling OPSEC-safe lateral movement across Active Directory environments.

You should use Kerberos authentication instead of NTLM to avoid triggering common security monitoring alerts. This Skill prioritizes Kerberos-first methods like Pass-the-Ticket because direct NTLM Pass-the-Hash traffic is more heavily monitored and easily detected by defenders.