🧙 HTB: Sorcery

Git leak → passkey bypass → Kafka RCE → Docker registry → IPA privesc

Writeup is private while the box is still active. Full version will be published upon retirement.