# HTB-Hercules
12 min read
Starting off I tried enumerating some users but this gave no valid users.
/ posts/ 5
# HTB-Eighteen
6 min read
I tried the creds for winrm but they didn’t work, let’s try them for port 80 instead.
# HTB-NanoCorp
5 min read
By clicking on About Us it takes us to a subdomain:
# HTB-Passage
3 min read
We can leave comments:
# HTB-GoodGames
3 min read
The site seems to be running on python, meaning it’s LIKELY a Flask or Django instance.
# HTB-Usage
3 min read
I analyse the request right away in burp: