312-49 · Question #6
Hash injection attack allows attackers to inject a compromised hash into a local session and use the hash to validate network resources.
The correct answer is A. True. This statement is true. A hash injection attack (also known as a Pass-the-Hash attack) allows an attacker who has obtained a password hash (e.g., NTLM hash) to inject it into an authentication session without ever knowing the plaintext password. The attacker uses the hash directl
Question
Hash injection attack allows attackers to inject a compromised hash into a local session and use the hash to validate network resources.
Options
- ATrue
- BFalse
How the community answered
(44 responses)- A93% (41)
- B7% (3)
Explanation
This statement is true. A hash injection attack (also known as a Pass-the-Hash attack) allows an attacker who has obtained a password hash (e.g., NTLM hash) to inject it into an authentication session without ever knowing the plaintext password. The attacker uses the hash directly to authenticate to network services, bypassing the need to crack the password. This is a common lateral movement technique in Windows environments.
Topics
Community Discussion
No community discussion yet for this question.