Logging Writeup - HackTheBox
Medium
Windows
Last updated July 14, 2026 • 7 min read
Discovery
Port Scan
┌──(kali㉿kali)-[~]
└─$ scan_tcp_full $TARGET_IP
PORT STATE SERVICE VERSION 53/tcp open domain Simple DNS Plus 80/tcp open http Microsoft IIS httpd 10.0 88/tcp open kerberos-sec Microsoft Windows Kerberos 139/tcp open netbios-ssn 389/tcp open ldap Microsoft Windows AD LDAP (Domain: logging.htb) 445/tcp open microsoft-ds 464/tcp open kpasswd5 636/tcp open ssl/ldap 3269/tcp open ssl/ldap 5985/tcp open http Microsoft HTTPAPI (WinRM) 8530/tcp open http Microsoft IIS httpd 10.0 8531/tcp open ssl/unknown (CN=DC01.logging.htb) 9389/tcp open mc-nmf .NET Message Framing Service Info: Host: DC01; OS: Windows
This is a Domain Controller for logging.htb. Ports 8530/8531 are WSUS (Windows Server Update Services). Sync the clock immediately to avoid Kerberos issues:
┌──(kali㉿kali)-[~]
└─$ sudo timedatectl set-ntp false
┌──(kali㉿kali)-[~]
└─$ sudo ntpdate $TARGET_IP
Add hosts entries:
┌──(kali㉿kali)-[~]
└─$ echo "$TARGET_IP logging.htb DC01.logging.htb" | sudo tee -a /etc/hosts
Protected Writeup
This has not retired yet on HackTheBox. We only publish writeups for retired machines and challenges. Once it retires, this writeup will become publicly accessible.