Pass-the-Hash & NTLM Relay

advanced Hands-on lab 55 min 3 tasksSubscription

The endgame of credential attacks: capture NetNTLMv2 challenge-responses with Responder, crack them offline (hashcat -m 5600), and when cracking fails, pass-the-hash with impacket - using the raw NT hash to authenticate without ever knowing the password.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Password & Credential Attacks

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free account Sign in to start

Updated 2026-06-06