# HTB-Vintage

2026-01-30 5 min read

By mutating a wordlist to the naming convention of the user we already found we can find another user in the domain:

# HTB-Scepter

2026-01-24 6 min read

Right away I noticed that an NFS port was open which is almost always low hanging fruit.

2026-01-24 3 min read

Using the provided creds I start off by running an enum scan of the target:

2026-01-23 4 min read

Using the enum4linux-ng tool I was able to enumerate the following information:

2025-11-22 8 min read

I started off by mounting the nfs share.

2025-11-19 12 min read

Starting off I tried enumerating some users but this gave no valid users.