Web
Nmap discovered a Web server on the target port 8443
The running service is nginx 1.18.0 (Ubuntu)
Webroot
Redirected to the
/login
endpoint
This appears to be corresponding to the DNS A record;core.ghost.htb
There appears to be AD Federation with in the target organization as it suggests to login with it
Clicking into the login button, redirects the request to
federation.ghost.htb
on the target port 443
and it takes to the issuer endpoint at
federation.ghost.htb