42
votes
How to pass hash as password to ssh server
You will not be able to do that.
The password is verified by the SSH server (or better by PAM library or similar authentication backend on other platform) by taking the received password, hashing it ...
- 196k
5
votes
How to pass hash as password to ssh server
I'm going to go out on a limb and guess that this is part of a penetration testing training programme. In which case, you can't get into the system using that hash directly, but you can pass that hash ...
- 2,560
2
votes
How to overcome MD4 hashing in SAMBA
MD4 is intrinsic to NTLM authentication. NTLM uses an unsalted MD4 hash of the password as the secret, and in some versions, it uses that hash to encrypt a challenge with DES, and in other versions ...
- 9,194
2
votes
Accepted
Is it possible make a Pass-The-Hash attack with Responder?
Responder gathers NetNTLMv1 and NetNTLMv2 hashes, to be precise. These hashes are generated as part of a challenge-response mechanism, and as a result in much harder to crack than LM or NTLM hashes, ...
- 488
1
vote
Is this Wikipedia article about SCRAM wrong?
The reason SCRAM prevents pass the hash is that the factors of the hash change due to the challenge.
(the counter should be a nonce thereby making it trivial for the real secret holder to calculate a ...
- 8,477
Only top scored, non community-wiki answers of a minimum length are eligible