# HTB-DarkZero 2025-11-22 5 min read Since we already got valid creds I decided to use nxc to spray the credentials mssql CVE-2024-30088 pivoting tunneling Read