To exploit this Windows machine we’ll use an old but efficient vulnerability. Add the IP address in /etc/hosts: … 10.10.10.3 blue.htb … First run a nmap scan: There are only two interestng ports that are open: 139 and 445 which are SMB ports. All the other ones are basic RPC ports. If we try to…