Right now pass-the-hash attacks work against Windows systems, to some extent some web applications.

But what about other OS systems e.g. Linux, MAC OS. Can they be attacked using pass-the-hash attack? I know that there are no tools (that am aware off) to do such attacks against systems such as Linux, yet. But at least in theory any system that uses single-signOn can be attacked via pass-the-hash attack.

So is it safe and correct to say that pass-the-hash is possible/impossible in an environment where Linux/OS X is the only OS used?

Thanks timmedin


How can you get transparent access to network without storing users' credentials somewhere?And without asking users to enter their passwords each time they want to access a resource on the network?

What the modification will do to the process?


I'm not that familiar with Linux so please don't flame me if the question sounded silly.

If a company is working in a pure Linux environment, where users will pretty much be accessing shared folders to work on files, print files, etc. How they will be able to do it without being asked for their passwords each time they want to use a resource?