Ravi Sir's Cyber Security Cards › Interview Cards
What is Pass-the-Hash at awareness level?
What is Pass-the-Hash at awareness level? Pass-the-Hash is reusing a stolen password hash to log in without the plain password. An attacker grabs a hash on one PC and authenticates to another with it. “Defence: limit lateral admin, Credential Guard/LAPS, and tiered administration.” It lets attackers
Read card text
What this card says
Short answer
Pass-the-Hash is reusing a stolen password hash to log in without the plain password.
Example
An attacker grabs a hash on one PC and authenticates to another with it.
Say it in the interview
“Defence: limit lateral admin, Credential Guard/LAPS, and tiered administration.”
Why it matters
It lets attackers move around without ever cracking the password.
Learn more in the lesson: 47.5 Identity Attacks Awareness (Kerberos / PTH – defensive talking points only)