OpenSource from hackthebox, we learn web app enumeration, and find credentials and source code in downloadable source zip. We exploit a directory traversal vulnerability to obtain a shell via Flask app, debug pin calculation (failed) and source file overwriting. Accessing a private Gitea instance reveals an SSH key for host access. Exploiting a root-running cron job with Git hooks grants root shell access. Subscribe for more! ***This is for educational purposes only***, Youtube bot, this is a ctf :)