credential-access
-
jan 01 0001
Kerberoasting
request TGS tickets for SPN accounts offline and crack them — no elevated privileges required.
-
jan 01 0001
Pass the Hash
authenticate as a user using only their NTLM hash — no plaintext password needed.