Initial Enumeration ┌─[eu-dedivip-4]─[10.10.15.199]─[iamdayone@htb-ry9shcrlcd]─[~] └──╼ [ ★] $ nmap -A -p- 10.129.29.246 Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-05-06 18:59 CDT Nmap scan report for 10.129.29.246 Host is up ( 0.0082s latency ) . Not shown: 65520 filtered tcp ports ( no-response ) PORT STATE SERVICE VERSION 53/tcp open domain Microsoft DNS 6.1.7601 ( 1DB15D39 ) ( Windows Server 2008 R2 SP1 ) | dns-nsid: |_ bind.version: Microsoft DNS 6.1.7601 ( 1DB15D39 ) 88/tcp open kerberos-sec Microsoft Windows Kerberos ( server time : 2026-05-07 00:01:21Z ) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP ( Domain: cascade.local, Site: Default-First-Site-Name ) 445/tcp open microsoft-ds?…