In this HackTheBox challenge, accessing a user through SSH is straightforward. But to elevate privileges, I needed to access a service on the machine that was only listening through localhost. This was accomplished through SSH Tunneling.

The HackTheBox challenge "TwoMillion" involved a little bit of everything, but plenty of API exploitation. The hardest part is simply finding the vulnerabilities, but this challenge offers a guided mode which gives you leads to follow.