Pass-the-Hash & Pass-the-Ticket

In a Windows network you almost never need to crack a password. You just need to find where the secret that proves it is sitting in memory — and reuse it. One dumped hash on one machine, and an attacker can walk sideways across the whole domain.