> For the complete documentation index, see [llms.txt](https://htb.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://htb.adot8.com/hack-the-box/windows-boxes.md). # Windows Boxes - [Mantis](https://htb.adot8.com/hack-the-box/windows-boxes/mantis.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration.md) - [1337](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/1337.md) - [8080](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/8080.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/88.md) - [1433,50255](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/1433-50255.md) - [rpc](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/rpc.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/enumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold/enumeration.md) - [james](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/foothold/james.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/mantis/credentials.md) - [Signed](https://htb.adot8.com/hack-the-box/windows-boxes/signed.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/signed/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/signed/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/signed/enumeration.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/signed/enumeration/1433.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/signed/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/signed/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/signed/credentials.md) - [TombWatcher](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/enumeration/445.md) - [389](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/enumeration/389.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/tombwatcher/credentials.md) - [Fluffy](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/enumeration/445.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/fluffy/credentials.md) - [Outdated](https://htb.adot8.com/hack-the-box/windows-boxes/outdated.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/enumeration/445.md) - [25](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/enumeration/25.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/outdated/credentials.md) - [Driver](https://htb.adot8.com/hack-the-box/windows-boxes/driver.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/driver/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/driver/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/driver/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/driver/enumeration/445.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/driver/enumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/driver/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/driver/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/driver/credentials.md) - [Remote](https://htb.adot8.com/hack-the-box/windows-boxes/remote.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/remote/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/remote/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/remote/enumeration.md) - [21](https://htb.adot8.com/hack-the-box/windows-boxes/remote/enumeration/21.md) - [111](https://htb.adot8.com/hack-the-box/windows-boxes/remote/enumeration/111.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/remote/enumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/remote/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/remote/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/remote/credentials.md) - [Forest](https://htb.adot8.com/hack-the-box/windows-boxes/forest.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/forest/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/forest/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/88.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/445.md) - [389,135](https://htb.adot8.com/hack-the-box/windows-boxes/forest/enumeration/389-135.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/forest/foothold/priv-esc.md) - [Manager](https://htb.adot8.com/hack-the-box/windows-boxes/manager.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/manager/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/manager/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/80.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/1433.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/manager/enumeration/88.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/manager/foothold/priv-esc.md) - [Hospital](https://htb.adot8.com/hack-the-box/windows-boxes/hospital.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration/80.md) - [8080](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/enumeration/8080.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold.md) - [Priv Esc (Web Server)](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/priv-esc-web-server.md) - [Pivot](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/pivot.md) - [Priv Esc (Windows)](https://htb.adot8.com/hack-the-box/windows-boxes/hospital/foothold/priv-esc-windows.md) - [Querier](https://htb.adot8.com/hack-the-box/windows-boxes/querier.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/querier/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/querier/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/445.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/1433.md) - [digging](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration/digging.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/querier/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/querier/enumeration-1.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/querier/priv-esc.md) - [Sauna](https://htb.adot8.com/hack-the-box/windows-boxes/sauna.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration/80.md) - [ffuf](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration/80/ffuf.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration/88.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/enumeration-1.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/priv-esc.md) - [svc\_mgr](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/priv-esc/svc_mgr.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/sauna/credentials.md) - [Active](https://htb.adot8.com/hack-the-box/windows-boxes/active.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/active/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/active/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/active/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/active/enumeration/445.md) - [88](https://htb.adot8.com/hack-the-box/windows-boxes/active/enumeration/88.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/active/enumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/active/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/active/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/active/priv-esc.md) - [Resolute](https://htb.adot8.com/hack-the-box/windows-boxes/resolute.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/enumeration.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/enumeration/enum4linux.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/enumeration/445.md) - [rpc](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/enumeration/rpc.md) - [Page 3](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/enumeration/page-3.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc.md) - [ryan](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc/ryan.md) - [nt authority\system](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/priv-esc/nt-authority-system.md) - [Users](https://htb.adot8.com/hack-the-box/windows-boxes/resolute/users.md) - [Legacy](https://htb.adot8.com/hack-the-box/windows-boxes/legacy.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/enumeration/445.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/enumeration/enum4linux.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/enumeration/page-2.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/legacy/credentials.md) - [Granny](https://htb.adot8.com/hack-the-box/windows-boxes/granny.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/granny/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/granny/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/granny/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/granny/enumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/granny/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/granny/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/granny/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/granny/credentials.md) - [Grandpa](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/enumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/grandpa/credentials.md) - [Bounty](https://htb.adot8.com/hack-the-box/windows-boxes/bounty.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/recon/nmap.md) - [Eumeration](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/80.md) - [Page 1](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/page-1.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/eumeration/page-2.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/bounty/credentials.md) - [Cascade](https://htb.adot8.com/hack-the-box/windows-boxes/cascade.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/enumeration.md) - [Page](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/enumeration/page.md) - [Page 1](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/enumeration/page-1.md) - [Page 2](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/enumeration/page-2.md) - [enum4linux](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/enumeration/enum4linux.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/foothold.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/foothold/enumeration.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/cascade/credentials.md) - [Mailing](https://htb.adot8.com/hack-the-box/windows-boxes/mailing.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/enumeration.md) - [80](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/enumeration/80.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/mailing/credentials.md) - [Cicada](https://htb.adot8.com/hack-the-box/windows-boxes/cicada.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/enumeration/445.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/cicada/credentials.md) - [EscapeTwo](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo.md) - [Recon](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/recon.md) - [nmap](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/recon/nmap.md) - [Enumeration](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/enumeration.md) - [445](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/enumeration/445.md) - [1433](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/enumeration/1433.md) - [Foothold](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/foothold.md) - [Priv Esc](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/priv-esc.md) - [Credentials](https://htb.adot8.com/hack-the-box/windows-boxes/escapetwo/credentials.md)