Post #425 489 Nov 7, 2021, 12:31 UTC HackTheBox - PivotAPIhttps://youtu.be/FbTxPz_GA4ohttps://youtu.be/hzsGMj9C8Nwhttps://0xdf.gitlab.io/2021/11/06/htb-pivotapi.html#htb #writeup #ad #reverse YouTube HackTheBox - PivotAPI 00:00 - Intro 01:00 - Start of nmap, downloading files over FTP 05:25 - The contents of all the PDF's don't really help. Using exiftool to extract authors. 08:20 - Using Kerbrute to bruteforce valid users and getting ASREP Hash. It is ETYPE 18, which hashcat…