Mar 16 · 3 min read · If you're doing Active Directory certificate attacks on HackTheBox, you've probably heard or used Certipy - the incredible tool by Oliver Lyak for PKI abuse. However, if you've tried installing it on
Join discussionFeb 8 · 3 min read · This article covers a mix of theoretical knowledge and hands-on practice focused on the SMB (Server Message Block) protocol. Using the Dancing room on HackTheBox, I demonstrate how basic SMB enumeration works in a real environment and how misconfigur...
Join discussionDec 28, 2025 · 6 min read · OVERVIEW So we are given an IP address let’s scan it using Nmap ENUMERATION So we got so many open ports Let’s check them and don’t forget to add the Domain name in /etc/hosts file I checked Port 80 and it is an IIS Windows Server and doesn’t hav...
Join discussion
Dec 25, 2025 · 5 min read · OVERVIEW So we have given IP address of the machine so Let’s head to Nmap to scan this IP ENUMERATION So these are the ports open and domain and domain controller name Be sure to add these into /etc/hosts So Port 2049 caught my eye which has nfs ...
Join discussion
Nov 21, 2025 · 2 min read · Initial Enumeration Performed an nmap scan to identify open ports and services: sudo nmap -sS -sV -T5 TARGET_IP Key findings: Port 22: OpenSSH 4.3 (protocol 2.0) Port 443: Apache httpd 2.2.3 (CentOS) running Elastix Port 10000: MiniServ 1.570 (W...
Join discussion