--- title: HTB: Authority | daily.dev description: Authority is a Windows domain controller that has open TCP ports, including SMB, DNS, HTTP, and HTTPS. The article discusses the enumeration of SMB and DNS, as... canonical: https://daily.dev/posts/htb-authority-ud8m6enrv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: HTB: Authority | daily.dev og:description: Authority is a Windows domain controller that has open TCP ports, including SMB, DNS, HTTP, and HTTPS. The article discusses the enumeration of SMB and DNS, as... og:url: https://daily.dev/posts/htb-authority-ud8m6enrv og:image: https://api.daily.dev/og/posts/ud8m6eNrv.png og:image:alt: HTB: Authority og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # HTB: Authority **[0xdf hacks stuff](https://daily.dev/sources/0xdf)** · 25 min read · 4 upvotes · 0 comments ## Summary Authority is a Windows domain controller that has open TCP ports, including SMB, DNS, HTTP, and HTTPS. The article discusses the enumeration of SMB and DNS, as well as finding Ansible playbooks in the Development share. It also explores the PWM instance running on TCP port 8443 and the vulnerability of ADCS to ESC1. The article provides steps to extract LDAP credentials and perform a PassTheCert attack to escalate privileges on the domain controller. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#active-directory](https://daily.dev/tags/active-directory), [#ansible](https://daily.dev/tags/ansible), [#dns](https://daily.dev/tags/dns), [#.net](https://daily.dev/tags/.net), [#pentest](https://daily.dev/tags/pentest), [#windows](https://daily.dev/tags/windows), [#wireshark](https://daily.dev/tags/wireshark) [View this post on daily.dev](https://daily.dev/posts/htb-authority-ud8m6enrv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"HTB: Authority","url":"https://daily.dev/posts/htb-authority-ud8m6enrv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/htb-authority-ud8m6enrv"},"datePublished":"2023-12-09T14:59:11.567Z","dateModified":"2024-02-20T02:14:04.997Z","description":"Authority is a Windows domain controller that has open TCP ports, including SMB, DNS, HTTP, and HTTPS. The article discusses the enumeration of SMB and DNS, as...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6288b908f3dea54c4da1d37074a164b3?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/6288b908f3dea54c4da1d37074a164b3?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"0xdf hacks stuff","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"0xdf hacks stuff","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/16cdada70d5f4fac8b588c53bcf005ff","url":"https://daily.dev/sources/0xdf"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/htb-authority-ud8m6enrv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"active-directory,ansible,dns,.net,pentest,windows,wireshark","timeRequired":"PT25M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"0xdf hacks stuff","item":"https://daily.dev/sources/0xdf"},{"@type":"ListItem","position":3,"name":"HTB: Authority"}]} ```