Demo - Hack Password Hash (Pass-the-hash) - BSides Amman 2019

Learn how to hack Windows memory and steal password hashes and use it to impersonate the local administrator account on a Windows Machine, and then use that hash to connect to remote resources using pass-the-hash technique.
I was honored to be speaking at the first Security Bsides Conference in Amman Jordan [20 April 2019 - ASU]. As requested by many attendees, I am making this session available online and the slides available on SlideShare.
The slides are available on SlideShare here:
www.slideshare...
This is part of a full session I presented in BSides Amman Security Conference.
• Security BSides Amman ...
Connect with me
----------------------------
About me: me.ahasayen.com
Blog: blog.ahasayen.com
Twitter: / ammarhasayen
LinkedIn: / ammarhasayen
Instagram: / ammarhasayen
SlideShare: www.slideshare...
Learn more about Bsides Amman
/ bsidesamman
View my Pluralsight course : Implementing Azure AD Privileged Identity Management
www.pluralsigh...

[@ZakariaRahim-uj8hy]

I have been trying to understand pass the hash until I watch this your video 😁you are the best

[@sks6867]

Everything was so neat, clean and systematic that even a newbie can understand this technique. Moreover explaining how to prevent this kind of attacks is like a bonus tip. Well done and keep posting such videos.

[@mohamedhammad1819]

great explanation, will done,

[@kabookeo]

Explained very well. Thank you!

[@akshatswami9401]

Use GameCrook, it works 100%.

[@Iowa.k]

Can you do a demo on the pass-the-hash alert in Defender for Identity?

[@fatimaalmarzouqi3539]

create material thanks for the great job

[@ahmadabdalla90]

Keen to know your thoughts on a commonly used tool for CLI internet access via outbound proxy (cntlm), one options of the confit options would be store your ntlm hash on its configuration file in plain text.

[@yehabashaw7374]

Concise presentation! Thank you for sharing Ammar.

[@reancybersecurity]

Great video

[@AmitKumar-ih8tk]

Well explained.. thanks