# HTB-DarkZero2025-11-225 min readSince we already got valid creds I decided to use nxc to spray the credentialsmssqlCVE-2024-30088pivotingtunnelingRead