During an internal network penetration test, a tester recovers the NTLM password hash for a user known to have full administrator privileges on a number of target systems. Efforts to crack the hash and recover the plaintext password have been unsuccessful. Which of the following would be the BEST target for continued exploitation efforts?
A) Operating system: Windows 7 Open ports: 23, 161
B) Operating system: Windows Server 2016 Open ports: 53, 5900
C) Operating system: Windows 8.1 Open ports: 445, 3389
D) Operating system: Windows 8 Open ports: 514, 3389

Question

Quizplus · Accepted Answer

Port 445 is used for SMB, which is a common target for exploitation, especially with NTLM hashes, as it can be used for pass-the-hash attacks.

During an Internal Network Penetration Test, a Tester Recovers the NTLM