{"id":478346,"date":"2023-08-09T09:31:27","date_gmt":"2023-08-09T09:31:27","guid":{"rendered":""},"modified":"2023-09-05T11:16:36","modified_gmt":"2023-09-05T11:16:36","slug":"pass-the-hash","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/pass-the-hash\/","title":{"rendered":"V\u01b0\u1ee3t qua h\u00e0m b\u0103m"},"content":{"rendered":"<p>Pass the Hash l\u00e0 m\u1ed9t kh\u00e1i ni\u1ec7m v\u00e0 k\u1ef9 thu\u1eadt an ninh m\u1ea1ng cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng truy c\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng ho\u1eb7c t\u00e0i nguy\u00ean b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m thay v\u00ec m\u1eadt kh\u1ea9u v\u0103n b\u1ea3n g\u1ed1c th\u1ef1c t\u1ebf. Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng kh\u00e1c nhau nh\u1eb1m gi\u00e0nh quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o h\u1ec7 th\u1ed1ng, g\u00e2y ra r\u1ee7i ro b\u1ea3o m\u1eadt \u0111\u00e1ng k\u1ec3 cho c\u00e1c t\u1ed5 ch\u1ee9c c\u0169ng nh\u01b0 ng\u01b0\u1eddi d\u00f9ng. Trong b\u00e0i vi\u1ebft n\u00e0y, ch\u00fang ta s\u1ebd \u0111i s\u00e2u v\u00e0o l\u1ecbch s\u1eed, ho\u1ea1t \u0111\u1ed9ng b\u00ean trong, lo\u1ea1i h\u00ecnh, c\u00e1ch s\u1eed d\u1ee5ng, th\u00e1ch th\u1ee9c v\u00e0 tri\u1ec3n v\u1ecdng trong t\u01b0\u01a1ng lai c\u1ee7a Pass the Hash. Ngo\u00e0i ra, ch\u00fang t\u00f4i s\u1ebd kh\u00e1m ph\u00e1 c\u00e1ch k\u1ef9 thu\u1eadt n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi m\u00e1y ch\u1ee7 proxy, t\u1eadp trung v\u00e0o nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy OneProxy (oneproxy.pro).<\/p>\n<h2>L\u1ecbch s\u1eed c\u1ee7a vi\u1ec7c v\u01b0\u1ee3t qua Hash<\/h2>\n<p>Kh\u00e1i ni\u1ec7m Pass the Hash b\u1eaft ngu\u1ed3n t\u1eeb vi\u1ec7c nh\u1eadn ra r\u1eb1ng vi\u1ec7c l\u01b0u tr\u1eef m\u1eadt kh\u1ea9u \u1edf d\u1ea1ng v\u0103n b\u1ea3n g\u1ed1c c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t r\u1ee7i ro b\u1ea3o m\u1eadt \u0111\u00e1ng k\u1ec3. \u0110\u00e1p l\u1ea1i, vi\u1ec7c b\u0103m m\u1eadt kh\u1ea9u tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn. B\u0103m l\u00e0 h\u00e0m m\u1ed9t chi\u1ec1u gi\u00fap chuy\u1ec3n \u0111\u1ed5i m\u1eadt kh\u1ea9u v\u0103n b\u1ea3n g\u1ed1c th\u00e0nh c\u00e1c chu\u1ed7i k\u00fd t\u1ef1 c\u00f3 \u0111\u1ed9 d\u00e0i c\u1ed1 \u0111\u1ecbnh, khi\u1ebfn cho vi\u1ec7c \u0111\u1ea3o ng\u01b0\u1ee3c qu\u00e1 tr\u00ecnh v\u00e0 l\u1ea5y \u0111\u01b0\u1ee3c m\u1eadt kh\u1ea9u ban \u0111\u1ea7u l\u00e0 kh\u00f4ng th\u1ec3 th\u1ef1c hi\u1ec7n \u0111\u01b0\u1ee3c v\u1ec1 m\u1eb7t t\u00ednh to\u00e1n.<\/p>\n<p>L\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn Pass the Hash c\u00f3 th\u1ec3 b\u1eaft ngu\u1ed3n t\u1eeb cu\u1ed1i nh\u1eefng n\u0103m 1990 khi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u v\u00e0 tin t\u1eb7c b\u1eaft \u0111\u1ea7u th\u1eed nghi\u1ec7m c\u00e1c c\u00e1ch \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c h\u1ec7 th\u1ed1ng x\u00e1c th\u1ef1c d\u1ef1a tr\u00ean m\u1eadt kh\u1ea9u. K\u1ef9 thu\u1eadt n\u00e0y tr\u1edf n\u00ean n\u1ed5i b\u1eadt v\u00e0o \u0111\u1ea7u nh\u1eefng n\u0103m 2000 khi nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u khai th\u00e1c \u0111i\u1ec3m y\u1ebfu c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows \u0111\u1ec3 th\u1ef1c hi\u1ec7n chuy\u1ec3n \u0111\u1ed9ng ngang v\u00e0 leo thang \u0111\u1eb7c quy\u1ec1n trong m\u1ea1ng b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin x\u00e1c th\u1ef1c b\u0103m.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Pass the Hash<\/h2>\n<p>Truy\u1ec1n Hash, nh\u01b0 t\u00ean cho th\u1ea5y, li\u00ean quan \u0111\u1ebfn vi\u1ec7c chuy\u1ec3n phi\u00ean b\u1ea3n b\u0103m c\u1ee7a th\u00f4ng tin x\u00e1c th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng thay v\u00ec m\u1eadt kh\u1ea9u th\u1ef1c c\u1ee7a h\u1ecd. Khi ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng, m\u1eadt kh\u1ea9u c\u1ee7a h\u1ecd s\u1ebd \u0111\u01b0\u1ee3c chuy\u1ec3n th\u00e0nh h\u00e0m b\u0103m b\u1eb1ng thu\u1eadt to\u00e1n b\u0103m nh\u01b0 MD5 ho\u1eb7c SHA-1. Thay v\u00ec s\u1eed d\u1ee5ng m\u1eadt kh\u1ea9u v\u0103n b\u1ea3n g\u1ed1c, k\u1ebb t\u1ea5n c\u00f4ng tr\u00edch xu\u1ea5t v\u00e0 s\u1eed d\u1ee5ng h\u00e0m b\u0103m n\u00e0y \u0111\u1ec3 x\u00e1c th\u1ef1c m\u00ecnh l\u00e0 ng\u01b0\u1eddi d\u00f9ng h\u1ee3p ph\u00e1p.<\/p>\n<p>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a Pass the Hash xoay quanh c\u00e1c b\u01b0\u1edbc sau:<\/p>\n<ol>\n<li>\n<p><strong>Thu th\u1eadp th\u00f4ng tin x\u00e1c th\u1ef1c<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng nhi\u1ec1u ph\u01b0\u01a1ng ph\u00e1p kh\u00e1c nhau, ch\u1eb3ng h\u1ea1n nh\u01b0 c\u00f4ng c\u1ee5 ph\u00e1 h\u1ee7y m\u1eadt kh\u1ea9u ho\u1eb7c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, \u0111\u1ec3 tr\u00edch xu\u1ea5t th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u00e3 b\u0103m t\u1eeb h\u1ec7 th\u1ed1ng \u0111\u00edch ho\u1eb7c b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n.<\/p>\n<\/li>\n<li>\n<p><strong>V\u01b0\u1ee3t qua h\u00e0m b\u0103m<\/strong>: Th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u00e3 b\u0103m \u0111\u01b0\u1ee3c tr\u00edch xu\u1ea5t sau \u0111\u00f3 s\u1ebd \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c th\u1ef1c v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng ho\u1eb7c d\u1ecbch v\u1ee5 kh\u00e1c trong m\u1ea1ng m\u00e0 kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u v\u0103n b\u1ea3n g\u1ed1c.<\/p>\n<\/li>\n<li>\n<p><strong>N\u00e2ng cao \u0111\u1eb7c quy\u1ec1n<\/strong>: Khi \u0111\u00e3 \u1edf trong m\u1ea1ng, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng c\u00e1c t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n n\u00e0y \u0111\u1ec3 n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n c\u1ee7a ch\u00fang, di chuy\u1ec3n ngang qua m\u1ea1ng v\u00e0 c\u00f3 kh\u1ea3 n\u0103ng gi\u00e0nh \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o th\u00f4ng tin nh\u1ea1y c\u1ea3m v\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng.<\/p>\n<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Pass the Hash<\/h2>\n<p>Pass the Hash c\u00f3 m\u1ed9t s\u1ed1 \u0111\u1eb7c \u0111i\u1ec3m c\u01a1 b\u1ea3n khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed9t k\u1ef9 thu\u1eadt h\u1ea5p d\u1eabn \u0111\u1ed1i v\u1edbi t\u1ed9i ph\u1ea1m m\u1ea1ng:<\/p>\n<ol>\n<li>\n<p><strong>\u0110\u1ed9c l\u1eadp m\u1eadt kh\u1ea9u<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 b\u1ecf qua nhu c\u1ea7u bi\u1ebft m\u1eadt kh\u1ea9u th\u1ef1c t\u1ebf c\u1ee7a c\u00e1c t\u00e0i kho\u1ea3n \u0111\u01b0\u1ee3c nh\u1eafm m\u1ee5c ti\u00eau, l\u00e0m gi\u1ea3m c\u01a1 h\u1ed9i b\u1ecb ph\u00e1t hi\u1ec7n th\u00f4ng qua c\u00e1c n\u1ed7 l\u1ef1c b\u1ebb kh\u00f3a m\u1eadt kh\u1ea9u.<\/p>\n<\/li>\n<li>\n<p><strong>Ki\u00ean tr\u00ec<\/strong>: V\u00ec th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m v\u1eabn c\u00f3 hi\u1ec7u l\u1ef1c cho \u0111\u1ebfn khi ng\u01b0\u1eddi d\u00f9ng thay \u0111\u1ed5i m\u1eadt kh\u1ea9u, n\u00ean k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 duy tr\u00ec quy\u1ec1n truy c\u1eadp trong th\u1eddi gian d\u00e0i, l\u00e0m t\u0103ng thi\u1ec7t h\u1ea1i ti\u1ec1m \u1ea9n m\u00e0 ch\u00fang c\u00f3 th\u1ec3 g\u00e2y ra.<\/p>\n<\/li>\n<li>\n<p><strong>Chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/strong>: Sau khi k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ed9t h\u1ec7 th\u1ed1ng, ch\u00fang c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Pass the Hash \u0111\u1ec3 di chuy\u1ec3n ngang trong m\u1ea1ng, x\u00e2m ph\u1ea1m nhi\u1ec1u h\u1ec7 th\u1ed1ng v\u00e0 d\u1eef li\u1ec7u h\u01a1n.<\/p>\n<\/li>\n<li>\n<p><strong>Kh\u00f3 ph\u00e1t hi\u1ec7n<\/strong>: C\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt truy\u1ec1n th\u1ed1ng c\u00f3 th\u1ec3 g\u1eb7p kh\u00f3 kh\u0103n trong vi\u1ec7c ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash v\u00ec ch\u00fang kh\u00f4ng d\u1ef1a v\u00e0o vi\u1ec7c truy\u1ec1n m\u1eadt kh\u1ea9u v\u0103n b\u1ea3n g\u1ed1c.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i v\u01b0\u1ee3t qua Hash<\/h2>\n<p>K\u1ef9 thu\u1eadt Pass the Hash c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e2n lo\u1ea1i th\u00e0nh c\u00e1c lo\u1ea1i kh\u00e1c nhau d\u1ef1a tr\u00ean c\u00e1ch ti\u1ebfp c\u1eadn c\u1ee5 th\u1ec3 c\u1ee7a ch\u00fang. C\u00e1c lo\u1ea1i ph\u1ed5 bi\u1ebfn nh\u1ea5t bao g\u1ed3m:<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>Ki\u1ec3u<\/strong><\/th>\n<th><strong>S\u1ef1 mi\u00eau t\u1ea3<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>V\u01b0\u1ee3t qua h\u00e0m b\u0103m c\u1ee5c b\u1ed9<\/td>\n<td>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng tr\u00edch xu\u1ea5t v\u00e0 s\u1eed d\u1ee5ng th\u00f4ng tin x\u00e1c th\u1ef1c b\u0103m t\u1eeb m\u00e1y c\u1ee5c b\u1ed9 n\u01a1i ch\u00fang \u0111\u00e3 c\u00f3 quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb.<\/td>\n<\/tr>\n<tr>\n<td>Truy\u1ec1n Hash t\u1eeb xa<\/td>\n<td>Th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m \u0111\u01b0\u1ee3c l\u1ea5y t\u1eeb m\u00e1y t\u1eeb xa ho\u1eb7c b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng di chuy\u1ec3n theo chi\u1ec1u ngang.<\/td>\n<\/tr>\n<tr>\n<td>V\u01b0\u1ee3t qua Hash<\/td>\n<td>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng h\u00e0m b\u0103m NTLM \u0111\u1ec3 t\u1ea1o phi\u00ean m\u1edbi m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u1eb7c quy\u1ec1n qu\u1ea3n tr\u1ecb.<\/td>\n<\/tr>\n<tr>\n<td>Truy\u1ec1n ch\u00eca kh\u00f3a<\/td>\n<td>T\u01b0\u01a1ng t\u1ef1 nh\u01b0 Pass the Hash, nh\u01b0ng \u1edf \u0111\u00e2y, k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng kh\u00f3a m\u1eadt m\u00e3 thay v\u00ec b\u0103m m\u1eadt kh\u1ea9u \u0111\u1ec3 x\u00e1c th\u1ef1c.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng V\u01b0\u1ee3t qua h\u00e0m b\u0103m, v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n<p>Pass the Hash \u0111\u1eb7t ra nh\u1eefng th\u00e1ch th\u1ee9c b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng v\u00e0 vi\u1ec7c s\u1eed d\u1ee5ng n\u00f3 kh\u00f4ng b\u1ecb gi\u1edbi h\u1ea1n \u1edf b\u1ea5t k\u1ef3 vect\u01a1 t\u1ea5n c\u00f4ng c\u1ee5 th\u1ec3 n\u00e0o. M\u1ed9t s\u1ed1 c\u00e1ch ph\u1ed5 bi\u1ebfn m\u00e0 k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt n\u00e0y bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Tuy\u00ean truy\u1ec1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i<\/strong>: Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, nh\u01b0 s\u00e2u ho\u1eb7c vi-r\u00fat, c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Pass the Hash \u0111\u1ec3 ph\u00e1t t\u00e1n tr\u00ean m\u1ea1ng, l\u00e2y nhi\u1ec5m sang c\u00e1c m\u00e1y kh\u00e1c.<\/p>\n<\/li>\n<li>\n<p><strong>N\u00e2ng cao \u0111\u1eb7c quy\u1ec1n<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 \u0111\u1eb7c quy\u1ec1n h\u1ea1n ch\u1ebf c\u00f3 th\u1ec3 leo thang l\u00ean c\u00e1c \u0111\u1eb7c quy\u1ec1n cao h\u01a1n trong m\u1ea1ng b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng Pass the Hash.<\/p>\n<\/li>\n<li>\n<p><strong>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u<\/strong>: V\u01b0\u1ee3t qua Hash cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng truy c\u1eadp v\u00e0 l\u1ea5y c\u1eafp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, d\u1eabn \u0111\u1ebfn nguy c\u01a1 vi ph\u1ea1m d\u1eef li\u1ec7u.<\/p>\n<\/li>\n<li>\n<p><strong>Truy c\u1eadp li\u00ean t\u1ee5c<\/strong>: B\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 duy tr\u00ec quy\u1ec1n truy c\u1eadp l\u00e2u d\u00e0i v\u00e0o h\u1ec7 th\u1ed1ng m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i th\u01b0\u1eddng xuy\u00ean x\u00e2m ph\u1ea1m m\u1eadt kh\u1ea9u.<\/p>\n<\/li>\n<\/ol>\n<p>\u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro li\u00ean quan \u0111\u1ebfn Pass the Hash, c\u00e1c t\u1ed5 ch\u1ee9c ph\u1ea3i tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd, bao g\u1ed3m:<\/p>\n<ul>\n<li>\n<p><strong>X\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA)<\/strong>: Vi\u1ec7c th\u1ef1c thi MFA c\u00f3 th\u1ec3 l\u00e0m gi\u1ea3m \u0111\u00e1ng k\u1ec3 t\u00e1c \u0111\u1ed9ng c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash, v\u00ec ngay c\u1ea3 khi k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m, ch\u00fang s\u1ebd kh\u00f4ng c\u00f3 c\u00e1c y\u1ebfu t\u1ed1 b\u1ed5 sung c\u1ea7n thi\u1ebft \u0111\u1ec3 x\u00e1c th\u1ef1c.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o v\u1ec7 th\u00f4ng tin x\u00e1c th\u1ef1c<\/strong>: Windows Credential Guard c\u00f3 th\u1ec3 gi\u00fap b\u1ea3o v\u1ec7 th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u00e3 b\u0103m kh\u1ecfi b\u1ecb tr\u00edch xu\u1ea5t v\u00e0 s\u1eed d\u1ee5ng cho c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash.<\/p>\n<\/li>\n<li>\n<p><strong>Xoay m\u1eadt kh\u1ea9u th\u00f4ng th\u01b0\u1eddng<\/strong>: Vi\u1ec7c thay \u0111\u1ed5i m\u1eadt kh\u1ea9u th\u01b0\u1eddng xuy\u00ean s\u1ebd gi\u1ea3m thi\u1ec3u c\u01a1 h\u1ed9i cho k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00f9ng m\u1ed9t th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c b\u0103m nhi\u1ec1u l\u1ea7n.<\/p>\n<\/li>\n<\/ul>\n<h2>\u0110\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh<\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 so s\u00e1nh gi\u1eefa Pass the Hash v\u00e0 c\u00e1c thu\u1eadt ng\u1eef an ninh m\u1ea1ng t\u01b0\u01a1ng t\u1ef1:<\/p>\n<table>\n<thead>\n<tr>\n<th><strong>Thu\u1eadt ng\u1eef<\/strong><\/th>\n<th><strong>S\u1ef1 mi\u00eau t\u1ea3<\/strong><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>V\u01b0\u1ee3t qua v\u00e9<\/td>\n<td>T\u01b0\u01a1ng t\u1ef1 nh\u01b0 Pass the Hash, nh\u01b0ng thay v\u00ec s\u1eed d\u1ee5ng h\u00e0m b\u0103m m\u1eadt kh\u1ea9u, k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng v\u00e9 Kerberos.<\/td>\n<\/tr>\n<tr>\n<td>V\u01b0\u1ee3t qua th\u00f4ng tin x\u00e1c th\u1ef1c<\/td>\n<td>M\u1ed9t thu\u1eadt ng\u1eef r\u1ed9ng h\u01a1n bao g\u1ed3m c\u00e1c k\u1ef9 thu\u1eadt nh\u01b0 Pass the Hash v\u00e0 Pass the Ticket.<\/td>\n<\/tr>\n<tr>\n<td>Truy\u1ec1n ch\u00eca kh\u00f3a<\/td>\n<td>Li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng kh\u00f3a m\u1eadt m\u00e3 thay v\u00ec b\u0103m m\u1eadt kh\u1ea9u \u0111\u1ec3 x\u00e1c th\u1ef1c.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai<\/h2>\n<p>Khi an ninh m\u1ea1ng ph\u00e1t tri\u1ec3n, c\u00e1c ph\u01b0\u01a1ng ph\u00e1p \u0111\u01b0\u1ee3c k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u0169ng v\u1eady. Trong t\u01b0\u01a1ng lai, ch\u00fang ta c\u00f3 th\u1ec3 mong \u0111\u1ee3i nh\u1eefng ti\u1ebfn b\u1ed9 trong c\u1ea3 k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng v\u00e0 ph\u00f2ng th\u1ee7 li\u00ean quan \u0111\u1ebfn Pass the Hash. M\u1ed9t s\u1ed1 c\u00f4ng ngh\u1ec7 ti\u1ec1m n\u0103ng trong t\u01b0\u01a1ng lai \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>B\u1ea3o v\u1ec7 th\u00f4ng tin x\u00e1c th\u1ef1c t\u1ed1t h\u01a1n<\/strong>: Nghi\u00ean c\u1ee9u \u0111ang di\u1ec5n ra c\u00f3 th\u1ec3 s\u1ebd d\u1eabn \u0111\u1ebfn c\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u1ea1nh m\u1ebd h\u01a1n \u0111\u1ec3 b\u1ea3o v\u1ec7 th\u00f4ng tin x\u00e1c th\u1ef1c, khi\u1ebfn ch\u00fang kh\u00f3 thu th\u1eadp v\u00e0 s\u1eed d\u1ee5ng h\u01a1n trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash.<\/p>\n<\/li>\n<li>\n<p><strong>X\u00e1c th\u1ef1c h\u00e0nh vi<\/strong>: Vi\u1ec7c tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p x\u00e1c th\u1ef1c h\u00e0nh vi c\u00f3 th\u1ec3 gi\u00fap ph\u00e1t hi\u1ec7n h\u00e0nh vi \u0111\u0103ng nh\u1eadp b\u1ea5t th\u01b0\u1eddng, g\u1eafn c\u1edd c\u00e1c n\u1ed7 l\u1ef1c V\u01b0\u1ee3t qua Hash ti\u1ec1m n\u0103ng.<\/p>\n<\/li>\n<li>\n<p><strong>M\u1eadt m\u00e3 kh\u00e1ng l\u01b0\u1ee3ng t\u1eed<\/strong>: V\u1edbi s\u1ef1 ra \u0111\u1eddi c\u1ee7a \u0111i\u1ec7n to\u00e1n l\u01b0\u1ee3ng t\u1eed, c\u00e1c thu\u1eadt to\u00e1n m\u1eadt m\u00e3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1ee3ng t\u1eed c\u00f3 th\u1ec3 tr\u1edf n\u00ean c\u1ea7n thi\u1ebft \u0111\u1ec3 b\u1ea3o m\u1eadt c\u00e1c quy tr\u00ecnh x\u00e1c th\u1ef1c.<\/p>\n<\/li>\n<\/ol>\n<h2>M\u00e1y ch\u1ee7 proxy v\u00e0 v\u01b0\u1ee3t qua h\u00e0m b\u0103m<\/h2>\n<p>C\u00e1c m\u00e1y ch\u1ee7 proxy, nh\u01b0 OneProxy (oneproxy.pro), c\u00f3 th\u1ec3 v\u1eeba l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash, v\u1eeba c\u00f3 th\u1ec3 v\u00f4 t\u00ecnh li\u00ean quan \u0111\u1ebfn k\u1ef9 thu\u1eadt n\u00e0y trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p nh\u1ea5t \u0111\u1ecbnh. M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 gi\u00fap b\u1ea3o v\u1ec7 kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb b\u00ean ngo\u00e0i b\u1eb1ng c\u00e1ch \u0111\u00f3ng vai tr\u00f2 trung gian gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7, cung c\u1ea5p l\u1edbp b\u1ea3o m\u1eadt b\u1ed5 sung.<\/p>\n<p>H\u01a1n n\u1eefa, m\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 ghi nh\u1eadt k\u00fd v\u00e0 gi\u00e1m s\u00e1t c\u00e1c l\u1ea7n th\u1eed x\u00e1c th\u1ef1c, \u0111i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 h\u1ed7 tr\u1ee3 ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash. B\u1eb1ng c\u00e1ch ph\u00e2n t\u00edch nh\u1eadt k\u00fd v\u00e0 h\u00e0nh vi c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1eabu \u0111\u00e1ng ng\u1edd v\u00e0 th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh \u0111\u1ed9ng c\u1ea7n thi\u1ebft.<\/p>\n<p>M\u1eb7t kh\u00e1c, n\u1ebfu b\u1ea3n th\u00e2n c\u00e1c m\u00e1y ch\u1ee7 proxy b\u1ecb x\u00e2m ph\u1ea1m, ch\u00fang c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh b\u01b0\u1edbc \u0111\u1ec7m cho nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng di chuy\u1ec3n ngang trong m\u1ea1ng, c\u00f3 kh\u1ea3 n\u0103ng s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt Pass the Hash \u0111\u1ec3 leo thang \u0111\u1eb7c quy\u1ec1n v\u00e0 x\u00e2m ph\u1ea1m c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Pass the Hash v\u00e0 c\u00e1c ch\u1ee7 \u0111\u1ec1 li\u00ean quan, h\u00e3y tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2014\/04\/22\/understanding-pass-the-hash-attacks-part-1\/\" target=\"_new\" rel=\"noopener nofollow\">Blog b\u1ea3o m\u1eadt c\u1ee7a Microsoft \u2013 T\u00ecm hi\u1ec3u c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass-the-Hash<\/a><\/li>\n<li><a href=\"https:\/\/attack.mitre.org\/techniques\/T1003\/\" target=\"_new\" rel=\"noopener nofollow\">MITER ATT&amp;CK \u2013 V\u01b0\u1ee3t qua h\u00e0m b\u0103m<\/a><\/li>\n<\/ul>\n<p>T\u00f3m l\u1ea1i, Pass the Hash l\u00e0 m\u1ed9t m\u1ed1i quan t\u00e2m an ninh m\u1ea1ng quan tr\u1ecdng \u0111\u00f2i h\u1ecfi s\u1ef1 c\u1ea3nh gi\u00e1c th\u01b0\u1eddng xuy\u00ean v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p ph\u00f2ng th\u1ee7 m\u1ea1nh m\u1ebd. C\u00e1c t\u1ed5 ch\u1ee9c ph\u1ea3i lu\u00f4n c\u1eadp nh\u1eadt th\u00f4ng tin v\u1ec1 c\u00e1c m\u1ed1i \u0111e d\u1ecda m\u1edbi n\u1ed5i, \u0111\u1ea7u t\u01b0 v\u00e0o c\u00e1c c\u00f4ng ngh\u1ec7 b\u1ea3o m\u1eadt ti\u00ean ti\u1ebfn v\u00e0 th\u00fac \u0111\u1ea9y v\u0103n h\u00f3a nh\u1eadn th\u1ee9c v\u1ec1 b\u1ea3o m\u1eadt \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro li\u00ean quan \u0111\u1ebfn k\u1ef9 thu\u1eadt n\u00e0y. Ngo\u00e0i ra, vi\u1ec7c s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy nh\u01b0 OneProxy (oneproxy.pro) c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t th\u00e0nh ph\u1ea7n c\u00f3 gi\u00e1 tr\u1ecb trong chi\u1ebfn l\u01b0\u1ee3c b\u1ea3o m\u1eadt to\u00e0n di\u1ec7n nh\u1eb1m b\u1ea3o v\u1ec7 kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Pass the Hash v\u00e0 c\u00e1c m\u1ed1i \u0111e d\u1ecda m\u1ea1ng kh\u00e1c.<\/p>","protected":false},"featured_media":478347,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478346","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Pass the Hash: An Overview<\/mark>","faq_items":[{"question":"What is Pass the Hash?","answer":"<p>Pass the Hash is a cybersecurity technique that allows attackers to gain unauthorized access to systems by using hashed credentials instead of plaintext passwords. It involves passing the hashed version of a user's credentials to authenticate without knowing the actual password.<\/p>"},{"question":"How did Pass the Hash originate?","answer":"<p>The concept of Pass the Hash emerged in response to the security risks of storing passwords in plaintext. The first known mention dates back to the late 1990s when researchers and hackers began experimenting with ways to bypass password-based authentication systems.<\/p>"},{"question":"How does Pass the Hash work?","answer":"<p>Pass the Hash involves several steps:<\/p><ol><li>Credential Harvesting: Attackers extract hashed credentials from a target system or domain controller.<\/li><li>Passing the Hash: Attackers use the extracted hashes to authenticate to other systems or services within the network.<\/li><li>Privilege Escalation: Once inside the network, attackers can escalate their privileges, potentially gaining access to sensitive information and critical systems.<\/li><\/ol>"},{"question":"What are the key features of Pass the Hash?","answer":"<p>Pass the Hash has some essential characteristics:<\/p><ul><li>Password Independence: Attackers don't need to know the actual passwords, reducing detection chances.<\/li><li>Persistence: Hashed credentials remain valid, granting long-term access.<\/li><li>Lateral Movement: Attackers can move laterally within the network using the obtained credentials.<\/li><li>Difficulty of Detection: Traditional security solutions may struggle to detect Pass the Hash attacks.<\/li><\/ul>"},{"question":"What are the types of Pass the Hash?","answer":"<p>Pass the Hash techniques can be classified into different categories:<\/p><ul><li>Local Pass the Hash: Using hashed credentials from the local machine.<\/li><li>Remote Pass the Hash: Obtaining hashed credentials from a remote machine or domain controller.<\/li><li>Overpass the Hash: Creating a new session with NTLM hash, not needing administrative privileges.<\/li><li>Pass the Key: Using cryptographic keys instead of password hashes for authentication.<\/li><\/ul>"},{"question":"How is Pass the Hash used, and what are the problems?","answer":"<p>Pass the Hash is used in various ways, including malware propagation, privilege escalation, data theft, and maintaining persistent access. Its usage poses significant security challenges, but organizations can mitigate risks by implementing multi-factor authentication, credential guard, and regular password rotation.<\/p>"},{"question":"How does Pass the Hash compare with other cybersecurity terms?","answer":"<p>Pass the Hash is related to other terms like Pass the Ticket, Pass the Credential, and Pass the Key, each having specific authentication techniques using different elements.<\/p>"},{"question":"What are the future perspectives and technologies related to Pass the Hash?","answer":"<p>The future of Pass the Hash involves advancements in attack and defense techniques. Better credential protection, behavioral authentication, and quantum-resistant cryptography are potential technologies to combat Pass the Hash attacks.<\/p>"},{"question":"How are proxy servers associated with Pass the Hash?","answer":"<p>Proxy servers, like OneProxy (oneproxy.pro), can play a role in both defending against Pass the Hash attacks and, if compromised, becoming a stepping stone for lateral movement within a network.<\/p>"},{"question":"Where can I find more information about Pass the Hash?","answer":"<p>For more information about Pass the Hash and related topics, you can refer to the following resources:<\/p><ul><li>Microsoft Security Blog - Understanding Pass-the-Hash Attacks: <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2014\/04\/22\/understanding-pass-the-hash-attacks-part-1\/\" target=\"_new\">Link<\/a><\/li><li>MITRE ATT&amp;CK - Pass the Hash: <a href=\"https:\/\/attack.mitre.org\/techniques\/T1003\/\" target=\"_new\">Link<\/a><\/li><\/ul>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/478346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/478346\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/478347"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=478346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}