Fun box overall, but no one is here for my opinions, so here are your hints:
This was great: it’s a very “real life” attack vector and there should definitely be more boxes like this one. I tend to not even look at things like this in HTB machines, luckily there is a big hint once you get access to the application, I would have never even tried it otherwise. Just enumerate a bit, do some research on the application and don’t exclude anything from your attack tree just because “well, it’s HTB”.
An evergreen, not very much to say.
Wait, what day is it? I’m sure I have done this already last week… There must be some glitch in the matrix.
As usual, feel free to PM me if you want cryptic hints, but be patient as I can’t be very responsive. Also do your homework, ask smart questions and make sure you showcase your assumptions and attack process: don’t just ask me to build one for you.
please, don’t just say “I’m stuck” or “I don’t know what to do”. Be familiar with this concepts (read introduction at least) before sending me DMs: How To Ask Questions The Smart Way