{"id":478346,"date":"2023-08-09T09:31:27","date_gmt":"2023-08-09T09:31:27","guid":{"rendered":""},"modified":"2023-09-05T11:16:36","modified_gmt":"2023-09-05T11:16:36","slug":"pass-the-hash","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/pass-the-hash\/","title":{"rendered":"\u30cf\u30c3\u30b7\u30e5\u3092\u6e21\u3059"},"content":{"rendered":"<p>Pass the Hash \u306f\u3001\u5b9f\u969b\u306e\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8 \u30d1\u30b9\u30ef\u30fc\u30c9\u3067\u306f\u306a\u304f\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8a8d\u8a3c\u60c5\u5831\u3092\u4f7f\u7528\u3057\u3066\u653b\u6483\u8005\u304c\u30b7\u30b9\u30c6\u30e0\u3084\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u6982\u5ff5\u3068\u624b\u6cd5\u3067\u3059\u3002\u3053\u306e\u624b\u6cd5\u306f\u3001\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u53d6\u5f97\u3059\u308b\u305f\u3081\u306b\u3055\u307e\u3056\u307e\u306a\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u3088\u304f\u4f7f\u7528\u3055\u308c\u3001\u7d44\u7e54\u3068\u30e6\u30fc\u30b6\u30fc\u306e\u53cc\u65b9\u306b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ea\u30b9\u30af\u3092\u3082\u305f\u3089\u3057\u307e\u3059\u3002\u3053\u306e\u8a18\u4e8b\u3067\u306f\u3001Pass the Hash \u306e\u6b74\u53f2\u3001\u5185\u90e8\u306e\u4ed5\u7d44\u307f\u3001\u7a2e\u985e\u3001\u4f7f\u7528\u6cd5\u3001\u8ab2\u984c\u3001\u304a\u3088\u3073\u5c06\u6765\u306e\u5c55\u671b\u306b\u3064\u3044\u3066\u8a73\u3057\u304f\u8aac\u660e\u3057\u307e\u3059\u3002\u3055\u3089\u306b\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e OneProxy (oneproxy.pro) \u306b\u7126\u70b9\u3092\u5f53\u3066\u3001\u3053\u306e\u624b\u6cd5\u304c\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3068\u3069\u306e\u3088\u3046\u306b\u95a2\u9023\u3057\u3066\u3044\u308b\u304b\u3092\u63a2\u308a\u307e\u3059\u3002<\/p>\n<h2>\u30d1\u30b9\u30fb\u30b6\u30fb\u30cf\u30c3\u30b7\u30e5\u306e\u6b74\u53f2<\/h2>\n<p>Pass the Hash \u306e\u6982\u5ff5\u306f\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u4fdd\u5b58\u3059\u308b\u3068\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30ea\u30b9\u30af\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u8a8d\u8b58\u304b\u3089\u751f\u307e\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u5bfe\u5fdc\u3057\u3066\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30cf\u30c3\u30b7\u30e5\u5316\u3059\u308b\u65b9\u6cd5\u304c\u666e\u53ca\u3057\u307e\u3057\u305f\u3002\u30cf\u30c3\u30b7\u30e5\u5316\u306f\u3001\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u56fa\u5b9a\u9577\u306e\u6587\u5b57\u5217\u306b\u5909\u63db\u3059\u308b\u4e00\u65b9\u5411\u95a2\u6570\u3067\u3042\u308a\u3001\u3053\u306e\u30d7\u30ed\u30bb\u30b9\u3092\u9006\u306b\u5b9f\u884c\u3057\u3066\u5143\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u53d6\u5f97\u3059\u308b\u3053\u3068\u306f\u8a08\u7b97\u4e0a\u4e0d\u53ef\u80fd\u3067\u3059\u3002<\/p>\n<p>Pass the Hash \u306b\u95a2\u3059\u308b\u6700\u521d\u306e\u8a00\u53ca\u306f\u3001\u7814\u7a76\u8005\u3084\u30cf\u30c3\u30ab\u30fc\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u30d9\u30fc\u30b9\u306e\u8a8d\u8a3c\u30b7\u30b9\u30c6\u30e0\u3092\u56de\u907f\u3059\u308b\u65b9\u6cd5\u3092\u5b9f\u9a13\u3057\u59cb\u3081\u305f 1990 \u5e74\u4ee3\u5f8c\u534a\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002\u3053\u306e\u624b\u6cd5\u304c\u6ce8\u76ee\u3092\u96c6\u3081\u308b\u3088\u3046\u306b\u306a\u3063\u305f\u306e\u306f\u3001\u653b\u6483\u8005\u304c Windows \u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u306e\u5f31\u70b9\u3092\u60aa\u7528\u3057\u3001\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u4f7f\u7528\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3067\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3084\u6a29\u9650\u306e\u6607\u683c\u3092\u5b9f\u884c\u3057\u59cb\u3081\u305f 2000 \u5e74\u4ee3\u521d\u982d\u3067\u3059\u3002<\/p>\n<h2>Pass the Hash\u306e\u8a73\u7d30\u60c5\u5831<\/h2>\n<p>Pass the Hash \u306f\u3001\u305d\u306e\u540d\u524d\u304c\u793a\u3059\u3088\u3046\u306b\u3001\u5b9f\u969b\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u4ee3\u308f\u308a\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u60c5\u5831\u306e\u30cf\u30c3\u30b7\u30e5 \u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u6e21\u3059\u3082\u306e\u3067\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u304c\u30b7\u30b9\u30c6\u30e0\u306b\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3068\u3001MD5 \u3084 SHA-1 \u306a\u3069\u306e\u30cf\u30c3\u30b7\u30e5 \u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u4f7f\u7528\u3057\u3066\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u30cf\u30c3\u30b7\u30e5\u306b\u5909\u63db\u3055\u308c\u307e\u3059\u3002\u653b\u6483\u8005\u306f\u3001\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4f7f\u7528\u3059\u308b\u4ee3\u308f\u308a\u306b\u3001\u3053\u306e\u30cf\u30c3\u30b7\u30e5\u3092\u62bd\u51fa\u3057\u3066\u4f7f\u7528\u3057\u3001\u6b63\u5f53\u306a\u30e6\u30fc\u30b6\u30fc\u3068\u3057\u3066\u81ea\u5206\u81ea\u8eab\u3092\u8a8d\u8a3c\u3057\u307e\u3059\u3002<\/p>\n<p>Pass the Hash \u306e\u5185\u90e8\u69cb\u9020\u306f\u3001\u6b21\u306e\u624b\u9806\u3092\u4e2d\u5fc3\u306b\u5c55\u958b\u3055\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u8a8d\u8a3c\u60c5\u5831\u306e\u53ce\u96c6<\/strong>\u653b\u6483\u8005\u306f\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u30c0\u30f3\u30d7\u30c4\u30fc\u30eb\u3084\u30de\u30eb\u30a6\u30a7\u30a2\u306a\u3069\u306e\u3055\u307e\u3056\u307e\u306a\u65b9\u6cd5\u3092\u4f7f\u7528\u3057\u3066\u3001\u30bf\u30fc\u30b2\u30c3\u30c8\u30b7\u30b9\u30c6\u30e0\u307e\u305f\u306f\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u304b\u3089\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u62bd\u51fa\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30cf\u30c3\u30b7\u30e5\u3092\u6e21\u3059<\/strong>: \u62bd\u51fa\u3055\u308c\u305f\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u306f\u3001\u5143\u306e\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u306e\u4ed6\u306e\u30b7\u30b9\u30c6\u30e0\u307e\u305f\u306f\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u8a8d\u8a3c\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6a29\u9650\u6607\u683c<\/strong>: \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u306b\u4fb5\u5165\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u3053\u308c\u3089\u306e\u7279\u6a29\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u5229\u7528\u3057\u3066\u6a29\u9650\u3092\u6607\u683c\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3057\u3066\u6a5f\u5bc6\u60c5\u5831\u3084\u91cd\u8981\u306a\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>Pass the Hash \u306e\u4e3b\u8981\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n<p>Pass the Hash \u306b\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u8005\u306b\u3068\u3063\u3066\u9b45\u529b\u7684\u306a\u624b\u6cd5\u3068\u306a\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u7279\u5fb4\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u72ec\u7acb\u6027<\/strong>: \u653b\u6483\u8005\u306f\u3001\u6a19\u7684\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u5b9f\u969b\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u77e5\u308b\u5fc5\u8981\u6027\u3092\u56de\u907f\u3067\u304d\u308b\u305f\u3081\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u30af\u30e9\u30c3\u30ad\u30f3\u30b0\u306e\u8a66\u307f\u306b\u3088\u3063\u3066\u691c\u51fa\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u4f4e\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6301\u7d9a\u6027<\/strong>: \u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u306f\u30e6\u30fc\u30b6\u30fc\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5909\u66f4\u3059\u308b\u307e\u3067\u6709\u52b9\u306a\u307e\u307e\u306a\u306e\u3067\u3001\u653b\u6483\u8005\u306f\u9577\u671f\u9593\u30a2\u30af\u30bb\u30b9\u3092\u7dad\u6301\u3067\u304d\u3001\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u306e\u3042\u308b\u640d\u5bb3\u304c\u5897\u5927\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6a2a\u65b9\u5411\u306e\u52d5\u304d<\/strong>\u653b\u6483\u8005\u304c 1 \u3064\u306e\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3001Pass the Hash \u3092\u4f7f\u7528\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3057\u3066\u3001\u3088\u308a\u591a\u304f\u306e\u30b7\u30b9\u30c6\u30e0\u3068\u30c7\u30fc\u30bf\u3092\u4fb5\u5bb3\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u691c\u51fa\u306e\u96e3\u3057\u3055<\/strong>: \u5f93\u6765\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3067\u306f\u3001\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u8ee2\u9001\u306b\u4f9d\u5b58\u3057\u306a\u3044\u305f\u3081\u3001Pass the Hash \u653b\u6483\u3092\u691c\u51fa\u3059\u308b\u306e\u304c\u96e3\u3057\u3044\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d1\u30b9\u30b6\u30cf\u30c3\u30b7\u30e5\u306e\u7a2e\u985e<\/h2>\n<p>Pass the Hash \u30c6\u30af\u30cb\u30c3\u30af\u306f\u3001\u7279\u5b9a\u306e\u30a2\u30d7\u30ed\u30fc\u30c1\u306b\u57fa\u3065\u3044\u3066\u3055\u307e\u3056\u307e\u306a\u30ab\u30c6\u30b4\u30ea\u306b\u5206\u985e\u3067\u304d\u307e\u3059\u3002\u6700\u3082\u4e00\u822c\u7684\u306a\u30bf\u30a4\u30d7\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>\u30bf\u30a4\u30d7<\/strong><\/th>\n<th><strong>\u8aac\u660e<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30ed\u30fc\u30ab\u30eb\u30d1\u30b9\u30b6\u30cf\u30c3\u30b7\u30e5<\/td>\n<td>\u653b\u6483\u8005\u306f\u3001\u3059\u3067\u306b\u7ba1\u7406\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3063\u3066\u3044\u308b\u30ed\u30fc\u30ab\u30eb \u30de\u30b7\u30f3\u304b\u3089\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u62bd\u51fa\u3057\u3066\u4f7f\u7528\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30ea\u30e2\u30fc\u30c8\u30d1\u30b9\u30b6\u30cf\u30c3\u30b7\u30e5<\/td>\n<td>\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u306f\u30ea\u30e2\u30fc\u30c8 \u30de\u30b7\u30f3\u307e\u305f\u306f\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u304b\u3089\u53d6\u5f97\u3055\u308c\u3001\u653b\u6483\u8005\u304c\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30cf\u30c3\u30b7\u30e5\u3092\u8d8a\u3048\u308b<\/td>\n<td>\u653b\u6483\u8005\u306f NTLM \u30cf\u30c3\u30b7\u30e5\u3092\u4f7f\u7528\u3057\u3066\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u65b0\u3057\u3044\u30bb\u30c3\u30b7\u30e7\u30f3\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30ad\u30fc\u3092\u6e21\u3059<\/td>\n<td>Pass the Hash \u306b\u4f3c\u3066\u3044\u307e\u3059\u304c\u3001\u3053\u3053\u3067\u306f\u653b\u6483\u8005\u306f\u8a8d\u8a3c\u306b\u30d1\u30b9\u30ef\u30fc\u30c9 \u30cf\u30c3\u30b7\u30e5\u3067\u306f\u306a\u304f\u6697\u53f7\u5316\u30ad\u30fc\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Pass the Hash \u306e\u4f7f\u3044\u65b9\u3001\u554f\u984c\u70b9\u3001\u89e3\u6c7a\u7b56<\/h2>\n<p>Pass the Hash \u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u91cd\u5927\u306a\u8ab2\u984c\u3092\u4f34\u3044\u3001\u305d\u306e\u4f7f\u7528\u306f\u7279\u5b9a\u306e\u653b\u6483\u30d9\u30af\u30c8\u30eb\u306b\u9650\u5b9a\u3055\u308c\u307e\u305b\u3093\u3002\u653b\u6483\u8005\u304c\u3053\u306e\u624b\u6cd5\u3092\u4f7f\u7528\u3059\u308b\u4e00\u822c\u7684\u306a\u65b9\u6cd5\u306b\u306f\u3001\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30de\u30eb\u30a6\u30a7\u30a2\u306e\u62e1\u6563<\/strong>: \u30ef\u30fc\u30e0\u3084\u30a6\u30a4\u30eb\u30b9\u306a\u3069\u306e\u60aa\u610f\u306e\u3042\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306f\u3001Pass the Hash \u3092\u4f7f\u7528\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u306b\u62e1\u6563\u3057\u3001\u4ed6\u306e\u30de\u30b7\u30f3\u306b\u611f\u67d3\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6a29\u9650\u6607\u683c<\/strong>: \u6a29\u9650\u304c\u5236\u9650\u3055\u308c\u3066\u3044\u308b\u653b\u6483\u8005\u306f\u3001Pass the Hash \u3092\u4f7f\u7528\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3067\u3088\u308a\u9ad8\u3044\u6a29\u9650\u306b\u6607\u683c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u306e\u76d7\u96e3<\/strong>Pass the Hash \u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u76d7\u307f\u51fa\u3059\u3053\u3068\u304c\u3067\u304d\u3001\u30c7\u30fc\u30bf\u4fb5\u5bb3\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6c38\u7d9a\u7684\u306a\u30a2\u30af\u30bb\u30b9<\/strong>\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u306f\u5b9a\u671f\u7684\u306b\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fb5\u5bb3\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u9577\u671f\u7684\u306a\u30a2\u30af\u30bb\u30b9\u3092\u7dad\u6301\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>Pass the Hash \u306b\u95a2\u9023\u3059\u308b\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u306b\u306f\u3001\u7d44\u7e54\u306f\u6b21\u306e\u3088\u3046\u306a\u5f37\u529b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u5b9f\u65bd\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\n<p><strong>\u591a\u8981\u7d20\u8a8d\u8a3c (MFA)<\/strong>: MFA \u3092\u9069\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u304c\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u6301\u3063\u3066\u3044\u305f\u3068\u3057\u3066\u3082\u3001\u8a8d\u8a3c\u306b\u5fc5\u8981\u306a\u8ffd\u52a0\u306e\u8981\u7d20\u3092\u6301\u305f\u306a\u3044\u305f\u3081\u3001Pass the Hash \u653b\u6483\u306e\u5f71\u97ff\u3092\u5927\u5e45\u306b\u8efd\u6e1b\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8cc7\u683c\u60c5\u5831\u30ac\u30fc\u30c9<\/strong>: Windows Credential Guard \u306f\u3001\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u304c\u62bd\u51fa\u3055\u308c\u3001Pass the Hash \u653b\u6483\u306b\u4f7f\u7528\u3055\u308c\u308b\u306e\u3092\u9632\u3050\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b9a\u671f\u7684\u306a\u30d1\u30b9\u30ef\u30fc\u30c9\u30ed\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3<\/strong>: \u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5b9a\u671f\u7684\u306b\u5909\u66f4\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u304c\u540c\u3058\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u7e70\u308a\u8fd4\u3057\u4f7f\u7528\u3059\u308b\u6a5f\u4f1a\u304c\u6700\u5c0f\u9650\u306b\u6291\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u6bd4\u8f03<\/h2>\n<p>Pass the Hash \u3068\u985e\u4f3c\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7528\u8a9e\u306e\u6bd4\u8f03\u3092\u4ee5\u4e0b\u306b\u793a\u3057\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>\u5b66\u671f<\/strong><\/th>\n<th><strong>\u8aac\u660e<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30c1\u30b1\u30c3\u30c8\u3092\u6e21\u3059<\/td>\n<td>Pass the Hash \u306b\u4f3c\u3066\u3044\u307e\u3059\u304c\u3001\u653b\u6483\u8005\u306f\u30d1\u30b9\u30ef\u30fc\u30c9 \u30cf\u30c3\u30b7\u30e5\u3092\u4f7f\u7528\u3059\u308b\u4ee3\u308f\u308a\u306b\u3001Kerberos \u30c1\u30b1\u30c3\u30c8\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u8cc7\u683c\u8a66\u9a13\u306b\u5408\u683c\u3059\u308b<\/td>\n<td>Pass the Hash \u3084 Pass the Ticket \u306a\u3069\u306e\u624b\u6cd5\u3092\u542b\u3080\u3001\u3088\u308a\u5e83\u3044\u7528\u8a9e\u3067\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30ad\u30fc\u3092\u6e21\u3059<\/td>\n<td>\u8a8d\u8a3c\u306b\u306f\u30d1\u30b9\u30ef\u30fc\u30c9 \u30cf\u30c3\u30b7\u30e5\u306e\u4ee3\u308f\u308a\u306b\u6697\u53f7\u5316\u30ad\u30fc\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u5c55\u671b\u3068\u5c06\u6765\u306e\u30c6\u30af\u30ce\u30ed\u30b8\u30fc<\/h2>\n<p>\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u9032\u5316\u3059\u308b\u306b\u3064\u308c\u3001\u653b\u6483\u8005\u304c\u4f7f\u7528\u3059\u308b\u624b\u6cd5\u3082\u9032\u5316\u3057\u3066\u3044\u307e\u3059\u3002\u5c06\u6765\u7684\u306b\u306f\u3001Pass the Hash \u306b\u95a2\u9023\u3059\u308b\u653b\u6483\u3068\u9632\u5fa1\u306e\u4e21\u65b9\u306e\u6280\u8853\u304c\u9032\u6b69\u3059\u308b\u3053\u3068\u304c\u4e88\u60f3\u3055\u308c\u307e\u3059\u3002Pass the Hash \u653b\u6483\u306b\u5bfe\u6297\u3059\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u5c06\u6765\u306e\u6280\u8853\u306b\u306f\u3001\u6b21\u306e\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u3088\u308a\u512a\u308c\u305f\u8cc7\u683c\u60c5\u5831\u4fdd\u8b77<\/strong>: \u9032\u884c\u4e2d\u306e\u7814\u7a76\u306b\u3088\u308a\u3001\u8cc7\u683c\u60c5\u5831\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u3088\u308a\u5805\u7262\u306a\u65b9\u6cd5\u304c\u958b\u767a\u3055\u308c\u3001\u8cc7\u683c\u60c5\u5831\u306e\u53ce\u96c6\u3084 Pass the Hash \u653b\u6483\u3067\u306e\u4f7f\u7528\u304c\u56f0\u96e3\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u884c\u52d5\u8a8d\u8a3c<\/strong>: \u884c\u52d5\u8a8d\u8a3c\u5bfe\u7b56\u3092\u5b9f\u88c5\u3059\u308b\u3068\u3001\u7570\u5e38\u306a\u30ed\u30b0\u30a4\u30f3\u884c\u52d5\u3092\u691c\u51fa\u3057\u3001\u6f5c\u5728\u7684\u306a Pass the Hash \u8a66\u884c\u3092\u8b66\u544a\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u91cf\u5b50\u8010\u6027\u6697\u53f7<\/strong>\u91cf\u5b50\u30b3\u30f3\u30d4\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u306e\u767b\u5834\u306b\u3088\u308a\u3001\u91cf\u5b50\u653b\u6483\u306b\u8010\u6027\u306e\u3042\u308b\u6697\u53f7\u5316\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u304c\u8a8d\u8a3c\u30d7\u30ed\u30bb\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u78ba\u4fdd\u306b\u4e0d\u53ef\u6b20\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u3068\u30cf\u30c3\u30b7\u30e5\u306e\u53d7\u3051\u6e21\u3057<\/h2>\n<p>OneProxy (oneproxy.pro) \u306a\u3069\u306e\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001Pass the Hash \u653b\u6483\u306b\u5bfe\u3059\u308b\u9632\u5fa1\u306e\u4e00\u90e8\u3068\u306a\u308b\u3060\u3051\u3067\u306a\u304f\u3001\u7279\u5b9a\u306e\u72b6\u6cc1\u3067\u306f\u3001\u3053\u306e\u624b\u6cd5\u3068\u610f\u56f3\u305b\u305a\u95a2\u9023\u4ed8\u3051\u3089\u308c\u308b\u3053\u3068\u3082\u3042\u308a\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d0\u30fc\u9593\u306e\u4ef2\u4ecb\u5f79\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c64\u3092\u8ffd\u52a0\u3059\u308b\u3053\u3068\u3067\u3001\u5916\u90e8\u304b\u3089\u306e\u653b\u6483\u304b\u3089\u4fdd\u8b77\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<p>\u3055\u3089\u306b\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u8a8d\u8a3c\u306e\u8a66\u884c\u3092\u30ed\u30b0\u306b\u8a18\u9332\u3057\u3066\u76e3\u8996\u3059\u308b\u3088\u3046\u306b\u69cb\u6210\u3067\u304d\u308b\u305f\u3081\u3001Pass the Hash \u653b\u6483\u306e\u691c\u51fa\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002\u30ed\u30b0\u3068\u30e6\u30fc\u30b6\u30fc\u306e\u884c\u52d5\u3092\u5206\u6790\u3059\u308b\u3053\u3068\u3067\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306f\u7591\u308f\u3057\u3044\u30d1\u30bf\u30fc\u30f3\u3092\u7279\u5b9a\u3057\u3001\u5fc5\u8981\u306a\u63aa\u7f6e\u3092\u8b1b\u3058\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u4e00\u65b9\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u81ea\u4f53\u304c\u4fb5\u5bb3\u3055\u308c\u305f\u5834\u5408\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u653b\u6483\u8005\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3059\u308b\u305f\u3081\u306e\u8e0f\u307f\u53f0\u3068\u306a\u308a\u3001Pass the Hash \u6280\u8853\u3092\u4f7f\u7528\u3057\u3066\u6a29\u9650\u3092\u6607\u683c\u3057\u3001\u4ed6\u306e\u30b7\u30b9\u30c6\u30e0\u3092\u4fb5\u5bb3\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>Pass the Hash \u304a\u3088\u3073\u95a2\u9023\u30c8\u30d4\u30c3\u30af\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2014\/04\/22\/understanding-pass-the-hash-attacks-part-1\/\" target=\"_new\" rel=\"noopener nofollow\">Microsoft \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d6\u30ed\u30b0 \u2013 Pass-the-Hash \u653b\u6483\u3092\u7406\u89e3\u3059\u308b<\/a><\/li>\n<li><a href=\"https:\/\/attack.mitre.org\/techniques\/T1003\/\" target=\"_new\" rel=\"noopener nofollow\">MITRE ATT&amp;CK \u2013 \u30cf\u30c3\u30b7\u30e5\u3092\u6e21\u3059<\/a><\/li>\n<\/ul>\n<p>\u7d50\u8ad6\u3068\u3057\u3066\u3001Pass the Hash \u306f\u3001\u7d99\u7d9a\u7684\u306a\u8b66\u6212\u3068\u5f37\u529b\u306a\u9632\u5fa1\u624b\u6bb5\u3092\u5fc5\u8981\u3068\u3059\u308b\u91cd\u5927\u306a\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u554f\u984c\u3067\u3059\u3002\u7d44\u7e54\u306f\u3001\u65b0\u305f\u306a\u8105\u5a01\u306b\u95a2\u3059\u308b\u60c5\u5831\u3092\u5e38\u306b\u628a\u63e1\u3057\u3001\u9ad8\u5ea6\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6280\u8853\u306b\u6295\u8cc7\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u610f\u8b58\u306e\u9ad8\u3044\u6587\u5316\u3092\u63a8\u9032\u3057\u3066\u3001\u3053\u306e\u624b\u6cd5\u306b\u95a2\u9023\u3059\u308b\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u3055\u3089\u306b\u3001OneProxy (oneproxy.pro) \u306a\u3069\u306e\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u306f\u3001Pass the Hash \u653b\u6483\u3084\u305d\u306e\u4ed6\u306e\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u304b\u3089\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u5305\u62ec\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6226\u7565\u306e\u8cb4\u91cd\u306a\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>","protected":false},"featured_media":478347,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478346","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Pass the Hash: An Overview<\/mark>","faq_items":[{"question":"What is Pass the Hash?","answer":"<p>Pass the Hash is a cybersecurity technique that allows attackers to gain unauthorized access to systems by using hashed credentials instead of plaintext passwords. It involves passing the hashed version of a user's credentials to authenticate without knowing the actual password.<\/p>"},{"question":"How did Pass the Hash originate?","answer":"<p>The concept of Pass the Hash emerged in response to the security risks of storing passwords in plaintext. The first known mention dates back to the late 1990s when researchers and hackers began experimenting with ways to bypass password-based authentication systems.<\/p>"},{"question":"How does Pass the Hash work?","answer":"<p>Pass the Hash involves several steps:<\/p><ol><li>Credential Harvesting: Attackers extract hashed credentials from a target system or domain controller.<\/li><li>Passing the Hash: Attackers use the extracted hashes to authenticate to other systems or services within the network.<\/li><li>Privilege Escalation: Once inside the network, attackers can escalate their privileges, potentially gaining access to sensitive information and critical systems.<\/li><\/ol>"},{"question":"What are the key features of Pass the Hash?","answer":"<p>Pass the Hash has some essential characteristics:<\/p><ul><li>Password Independence: Attackers don't need to know the actual passwords, reducing detection chances.<\/li><li>Persistence: Hashed credentials remain valid, granting long-term access.<\/li><li>Lateral Movement: Attackers can move laterally within the network using the obtained credentials.<\/li><li>Difficulty of Detection: Traditional security solutions may struggle to detect Pass the Hash attacks.<\/li><\/ul>"},{"question":"What are the types of Pass the Hash?","answer":"<p>Pass the Hash techniques can be classified into different categories:<\/p><ul><li>Local Pass the Hash: Using hashed credentials from the local machine.<\/li><li>Remote Pass the Hash: Obtaining hashed credentials from a remote machine or domain controller.<\/li><li>Overpass the Hash: Creating a new session with NTLM hash, not needing administrative privileges.<\/li><li>Pass the Key: Using cryptographic keys instead of password hashes for authentication.<\/li><\/ul>"},{"question":"How is Pass the Hash used, and what are the problems?","answer":"<p>Pass the Hash is used in various ways, including malware propagation, privilege escalation, data theft, and maintaining persistent access. Its usage poses significant security challenges, but organizations can mitigate risks by implementing multi-factor authentication, credential guard, and regular password rotation.<\/p>"},{"question":"How does Pass the Hash compare with other cybersecurity terms?","answer":"<p>Pass the Hash is related to other terms like Pass the Ticket, Pass the Credential, and Pass the Key, each having specific authentication techniques using different elements.<\/p>"},{"question":"What are the future perspectives and technologies related to Pass the Hash?","answer":"<p>The future of Pass the Hash involves advancements in attack and defense techniques. Better credential protection, behavioral authentication, and quantum-resistant cryptography are potential technologies to combat Pass the Hash attacks.<\/p>"},{"question":"How are proxy servers associated with Pass the Hash?","answer":"<p>Proxy servers, like OneProxy (oneproxy.pro), can play a role in both defending against Pass the Hash attacks and, if compromised, becoming a stepping stone for lateral movement within a network.<\/p>"},{"question":"Where can I find more information about Pass the Hash?","answer":"<p>For more information about Pass the Hash and related topics, you can refer to the following resources:<\/p><ul><li>Microsoft Security Blog - Understanding Pass-the-Hash Attacks: <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2014\/04\/22\/understanding-pass-the-hash-attacks-part-1\/\" target=\"_new\">Link<\/a><\/li><li>MITRE ATT&amp;CK - Pass the Hash: <a href=\"https:\/\/attack.mitre.org\/techniques\/T1003\/\" target=\"_new\">Link<\/a><\/li><\/ul>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/478346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/478346\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/478347"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=478346"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}