HackTheBox: Querier
Enumeration 1 export target=10.129.50.86 Port Scanning 1 rustscan -a $target --ulimit 10000 -g 1 nmap -Pn -sC -sV -n -p135,139,5985,445,47001,49664,49667,49665,49666 -T5 $target -oN nmap_querier SMB SMB is open. Try null session 1 smbclient -N -L //$target/ 1 smbclient -N //$target/Reports There is a file we can access, download it 1 mget * It is a .xlsm file. We need to find a way to open it. ...