# HTB-Kobold

2026-03-26 3 min read

Accordingly I ran a ffuf vhost scan on both port 80 and 443.

# HTB-CCTV

2026-03-12 2 min read

Heading over to the web server I find the following:

2026-03-05 5 min read

In order to avoid clock skew errors I used the following commands to adjust the time to that of the target:

2026-02-17 2 min read

Heading over to the Client Portal tab we get redirected to another vhost which we need to add in order to access it.

2026-02-01 3 min read

I then went ahead and used gobuster to enumerate the directories.

2026-01-30 5 min read

By mutating a wordlist to the naming convention of the user we already found we can find another user in the domain: