mimikatz icon indicating copy to clipboard operation
mimikatz copied to clipboard

pth is problematic with newer versions of windows

Open eyalk5 opened this issue 4 years ago • 0 comments

When performing pass-the-hash with sekurlsa::pth in newer versions of windows 10 only NT hash is injected and Kerberos keys are failing to be injected. We aren't sure the exact version where it started failing. However, we've tested Windows 10 version 2004 and the issue reproduced there. We have debugged the issue in our lab and found that the Kerberos hash password structure has changed. image Notice that the key types are incorrect. We are sending a pull request for this issue.

eyalk5 avatar Dec 09 '20 13:12 eyalk5