# HTB-Certified
3 min read
Using the provided creds I start off by running an enum scan of the target:
/ tags/ enum4linux
# HTB-Escape
4 min read
Using kerbrute I was able to find the following service accounts present:
# HTB-Outdated
6 min read
There’s a web server open on 8530 and smtp seems to be open as well. Furthermore this seems to be a Domain Controller inside the outdated.htb domain called DC.outdated.htb.