---
id: 5800
title: "Pass the Hash Attack Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/pass-the-hash-attack-explained/"
published_at: "2025-04-09T05:37:20Z"
tags: ["active-directory", "credential-theft", "privilege-escalation", "pass-the-hash", "lateral-movement", "mimikatz", "cobalt-strike"]
phying_url: "https://phying.com/item/5800"
lang: en
---

# Pass the Hash Attack Explained

## Summary

Pass the Hash lets attackers authenticate with stolen NT hashes instead of plaintext passwords, enabling stealthy lateral movement. The post shows the technique with Cobalt Strike and Mimikatz.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-04-09T05:37:20Z
- **Original:** https://www.semperis.com/blog/pass-the-hash-attack-explained/
- **Phying News:** https://phying.com/item/5800