# HTB-Certified2026-01-243 min readUsing the provided creds I start off by running an enum scan of the target:BloodHoundBloodyADcertipy-adADCSenum4linuxWriteOwnerESC9GenericWriteGenericAllRead