Manipulating User Passwords Without Mimikatz

There are two common reasons you may want to change a user’s password during a penetration test: You have their NT hash but not their plaintext password. Changing their password to a known plaintext value can allow you to access services in which Pass-the-Hash is not an option. You don’t have their NT hash or...

The post Manipulating User Passwords Without Mimikatz appeared first on TrustedSec.

mimikatz password audits passwords penetration testing red team adversarial attack simulation security testing & analysis social engineering