🦉 HTB: Nocturnal

Upload viewer leak → admin panel RCE → DB hash → ISPConfig CVE → root

Writeup is private while the box is still active. Full version will be published upon retirement.