mimikatz
mimikatz copied to clipboard
pth is problematic with newer versions of windows
When performing pass-the-hash with sekurlsa::pth in newer versions of windows 10 only NT hash is injected and Kerberos keys are failing to be injected. We aren't sure the exact version where it started failing. However, we've tested Windows 10 version 2004 and the issue reproduced there.
We have debugged the issue in our lab and found that the Kerberos hash password structure has changed.
Notice that the key types are incorrect. We are sending a pull request for this issue.