Credential Reuse Exploitation

Use a previously captured NTLM password hash to authenticate as its associated account without knowing the cleartext password. Acquiring the hash, including from LSASS memory (T1003.001), is a separate credential-access activity. Choose one hash-use path: request a Kerberos TGT with Rubeus overpass-the-hash, authenticate interactively to SMB with Impacket smbclient.py, or execute a bounded command over SMB with Impacket psexec.py. These paths are alternatives; a successful authentication alone does not grant administrative rights or prove remote command execution.