Pass-the-Hash Attack

Pass-the-Hash (PtH) exploits Windows NTLM authentication: once an attacker has an NT hash (from memory dump, credential files, or the registry), they can authenticate AS that user without ever knowing the plaintext password.