Cracking Hashes

NTLM

LM Hash and NT Hash

If you are using Evil-WinRM, you can actually Pass-the-Hash with the -H flag if you find the Administrator's NTLM hash.