I want to take a side for a second and discuss briefly past the hash. This is not too far off from some of the exercises that we've practiced with already through Kerberos and also getting some of the information for our Golden Ticket exercise that we've been working on.
In fact, if we zoom in, you can see that one of the commands that we used to be able to get information about the Kerberos account, we used the same command for the account of Eric.
And that's where we uncover the NTLM hash. And this is information that goes back and forth because NTLM has a specific set of protocols that it uses to be able to go between a user and authentication services on the actual Active Directory domain.
And it also works on actual local logins or remote logins to local accounts. Now, there's a couple of things that you need to remember about this.
Even though you can use the same command that you see above over there, over there, that for to be able to get the NTLM hash, there are more protocols put into place inside of the Microsoft world that prevents this from being as useful as it used to be.
In Windows Vista and prior being able to use the NTLM hash to log into an account locally or even through the Active Directory did not strip any permissions with using that method.
However, inside of Active Directory now and more current versions of Windows, if you use a remote login that has administrative accounts and you're only using the NTLM hash to be able to log in, it strips those administrative privileges.
You're still able to log in with administrator, but you won't have any administrator privileges. So, I just wanted to point out here that pass the hash is in the same vein of everything that we've been doing so far and we're wrapping up with.
It's just that it's not as useful as what it once was, but it is enough to be able to get you into an actual system. So, if you want to maintain a little bit of persistence, you can use this method to be able to backdoor your way into a couple of accounts, even though they don't have the rights that we're actually looking for to be able to further our foothold in the organization.