One Day Sec

Why did the FreeRDP pass-the-hash feature fail in my tests, and what is the workaround?

Modern versions of FreeRDP have removed the built-in `--pth` parameter, so direct hash authentication fails. To use FreeRDP for Pass the Hash, you need an older version that still supports the feature, such as the one from Portcullis Labs at `https://labs.portcullis.co.uk/download/FreeRDP-pth.tar.gz`, which must be recompiled. The command for that older version is: `xfreerdp /u:administrator /pth:hASH /v:target /cert-ignore`. For alternative tools, mimikatz combined with `mstsc.exe /restrictedadmin` is a more reliable method, as detailed in the main article.
FreeRDPpass the hashpth parameterolder versionrecompilation

Browse all Q&A →