Nmap

• HTB Support Writeup | SMB Share Loot → Hardcoded LDAP Creds → LDAP Password Leak → RBCD → DCSync Domain Compromise
• HTB DanglingTree Writeup | SMB Enumeration to Windows Admin Center RCE to Domain Compromise