# Windows Boxes - [Mantis](https://htb.adot8.com/hack-the-box/windows-boxes/mantis.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration.md) - [1337](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/1337.md) - [8080](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/8080.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/88.md) - [1433,50255](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/1433-50255.md) - [rpc](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/rpc.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/eumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold/enumeration.md) - [james](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold/james.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/credentials.md) - [Signed](https://htb.adot8.com/hack-the-box/windows-boxes/signed.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/signed/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/signed/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/signed/eumeration.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/signed/eumeration/1433.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/signed/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/signed/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/signed/credentials.md) - [TombWatcher](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/eumeration/445.md) - [389](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/eumeration/389.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/credentials.md) - [Fluffy](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/eumeration/445.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/credentials.md) - [Outdated](https://htb.adot8.com/hack-the-box/windows-boxes/outdated.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/eumeration/445.md) - [25](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/eumeration/25.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/credentials.md) - [Driver](https://htb.adot8.com/hack-the-box/windows-boxes/driver.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/driver/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/driver/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/driver/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/driver/eumeration/445.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/driver/eumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/driver/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/driver/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/driver/credentials.md) - [Remote](https://htb.adot8.com/hack-the-box/windows-boxes/remote.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/remote/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/remote/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/remote/eumeration.md) - [21](https://htb.adot8.com/hack-the-box/windows-boxes/remote/eumeration/21.md) - [111](https://htb.adot8.com/hack-the-box/windows-boxes/remote/eumeration/111.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/remote/eumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/remote/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/remote/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/remote/credentials.md) - [Forest](https://htb.adot8.com/hack-the-box/windows-boxes/forest.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/forest/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/forest/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/88.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/445.md) - [389,135](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/389-135.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold/priv-esc.md) - [Manager](https://htb.adot8.com/hack-the-box/windows-boxes/manager.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/manager/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/manager/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/80.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/1433.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/88.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold/priv-esc.md) - [Hospital](https://htb.adot8.com/hack-the-box/windows-boxes/hospital.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration/80.md) - [8080](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration/8080.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold.md) - [Priv Esc (Web Server)](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/priv-esc-web-server.md) - [Pivot](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/pivot.md) - [Priv Esc (Windows)](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/priv-esc-windows.md) - [Querier](https://htb.adot8.com/hack-the-box/windows-boxes/querier.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/querier/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/querier/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/445.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/1433.md) - [digging](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/digging.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/querier/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration-1.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/querier/priv-esc.md) - [Sauna](https://htb.adot8.com/hack-the-box/windows-boxes/sauna.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/recon/nmap.md) - [Eunmeration](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eunmeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eunmeration/80.md) - [ffuf](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eunmeration/80/ffuf.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eunmeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eunmeration/88.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/foothold.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/eumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/priv-esc.md) - [svc\_mgr](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/priv-esc/svc_mgr.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/credentials.md) - [Active](https://htb.adot8.com/hack-the-box/windows-boxes/active.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/active/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/active/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/active/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/active/eumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/active/eumeration/88.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/active/eumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/active/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/active/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/active/priv-esc.md) - [Resolute](https://htb.adot8.com/hack-the-box/windows-boxes/resolute.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/eumeration.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/eumeration/enum4linux.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/eumeration/445.md) - [rpc](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/eumeration/rpc.md) - [Page 3](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/eumeration/page-3.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc.md) - [ryan](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc/ryan.md) - [nt authority\system](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc/nt-authority-system.md) - [Users](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/users.md) - [Legacy](https://htb.adot8.com/hack-the-box/windows-boxes/legacy.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/eumeration/445.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/eumeration/enum4linux.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/eumeration/page-2.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/credentials.md) - [Granny](https://htb.adot8.com/hack-the-box/windows-boxes/granny.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/granny/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/granny/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/granny/eumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/granny/eumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/granny/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/granny/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/granny/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/granny/credentials.md) - [Grandpa](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/eumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/eumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/credentials.md) - [Bounty](https://htb.adot8.com/hack-the-box/windows-boxes/bounty.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/80.md) - [Page 1](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/page-1.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/page-2.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/credentials.md) - [Cascade](https://htb.adot8.com/hack-the-box/windows-boxes/cascade.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/eumeration.md) - [Page](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/eumeration/page.md) - [Page 1](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/eumeration/page-1.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/eumeration/page-2.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/eumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/credentials.md) - [Mailing](https://htb.adot8.com/hack-the-box/windows-boxes/mailing.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/eumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/eumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/credentials.md) - [Cicada](https://htb.adot8.com/hack-the-box/windows-boxes/cicada.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/eumeration/445.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/credentials.md) - [EscapeTwo](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/eumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/eumeration/445.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/eumeration/1433.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/credentials.md) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://htb.adot8.com/hack-the-box/windows-boxes.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.