# HTB-Scepter 2026-01-24 6 min read Right away I noticed that an NFS port was open which is almost always low hanging fruit. BloodHound BloodyAD certipy-ad ADCS forcechangepassword nfs GenericAll ESC14 Read