# HTB-Haze
5 min read
In order to quickly enumerate all the web servers I decided to run a gowitness scan:
/ posts
# HTB-Kobold
3 min read
Accordingly I ran a ffuf vhost scan on both port 80 and 443.
# HTB-CCTV
2 min read
Heading over to the web server I find the following:
# HTB-Pirate
5 min read
In order to avoid clock skew errors I used the following commands to adjust the time to that of the target:
# HTB-WingData
2 min read
Heading over to the Client Portal tab we get redirected to another vhost which we need to add in order to access it.
# HTB-Facts
3 min read
I then went ahead and used gobuster to enumerate the directories.