Pass-the-Hash

Active Directory Security / Network Security

What are Pass-the-Hash and Pass-the-Ticket Attacks: A Comprehensive Guide

by
What are Pass-the-Hash and Pass-the-Ticket Attacks A Comprehensive Guide

Introduction In contemporary cybersecurity, attackers continuously evolve their methods, moving beyond conventional password cracking and brute-force attacks to exploit the deeper weaknesses in authentication systems. Among the most serious threats to enterprise networks are Pass-the-Hash (PtH) and Pass-the-Ticket (PtT) attacks, which allow attackers to leverage stolen authentication material directly—whether in the form of hashed passwords or Kerberos tickets—without ever needing to obtain plaintext

Continue Reading →
Active Directory Security / Cyber Security

SMBMap: A Comprehensive Guide and Cheat Sheet

by

Introduction Server Message Block (SMB) is one of the most critical network protocols in modern corporate environments. Responsible for enabling shared access to files, printers, and serial ports across network nodes, it also frequently serves as a prime entry point during security assessments. Misconfigured share permissions, overly permissive guest access, and unpatched SMB implementations often grant attackers unauthorized access to sensitive corporate data or

Continue Reading →