If you’re trying to learn in general (for authorized security testing or education), I can provide:
Port 8080: The back door. Left ajar. Jenkins. No authentication. A server that hasn't seen an update since the pandemic.
, jumping from the lowly workstation to a secondary server, then to a domain controller [2, 4]. Each jump was precise, guided by the map KPortScan had generated just moments before. 3. The Final Strike