This technique is used to access Windows systems by compromising one system, extracting credentials, and then using the same credentials for authentication elsewhere in the domain. It exploits an implementation weakness in the authentication protocol because stored encrypted passwords are not salted and therefore remain static from session to session until the password is changed. NT LanManager Pass the hash Rainbow tables Dictionary attack