Pass the Hash Guidance Logo

Pass the Hash Guidance

0
Free
Visit Website

This project hosts scripts for aiding administrators in implementing Pass the Hash mitigations as outlined in the Reducing the Effectiveness of Pass the Hash paper. The PtHTools module contains the main commands for helping with implementing PtH mitigations: - Find-PotentialPtHEvents - Invoke-DenyNetworkAccess - Edit-AllLocalAccountPasswords - Get-LocalAccountSummaryOnDomain - Invoke-SmartcardHashRefresh - Find-OldSmartcardHash See the PtHTools readme file for more information on how to use them. Guidance: Reducing the Effectiveness of Pass the Hash Long-Lived Hashes for AD Smartcard Required Accounts Limit Workstation-to-Workstation Communication Microsoft guidance: https://aka.ms/pth - Microsoft's Pass-the-Hash general resource page. Mitigating Pass-the-Hash and Other Credential Theft v1 Mitigating Pass-the-Hash and Other Credential Theft v2 How Pass-the-Hash works Local Administrator Password Solution - LAPS is a Microsoft supported tool that ensures local administrator accounts do not all have the same password. It is an alternative to the Edit-AllLocalAccountPasswords command found in PtHTools. krbtgt refresh script - Resets the krbtgt account password twice to invalidate the hash.

FEATURES

ALTERNATIVES

A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Free and open-source cybersecurity training classes with multi-class learning paths for high-skill, high-pay job skills.

Andrew Case's personal page for research, software projects, and speaking events

Boston Key Party CTF 2013 - cybersecurity competition with challenges in various domains.

A detailed SSH cheat sheet for managing SSH connections and troubleshooting common issues.

A comprehensive guide to navigating the world of secure messaging apps, providing insights and recommendations to help you make an informed decision.

A comprehensive guide to developing an incident response capability through intelligence-based threat hunting, covering theoretical concepts and real-life scenarios.

Deliberately vulnerable CI/CD environment with 11 challenges to practice security.