# HTB-Mirage 2025-11-22 8 min read I started off by mounting the nfs share. BloodHound kerberoasting BloodyAD ADCS forcechangepassword netexec ESC10 nats nfs Read