I had a lot of fun with this one. Took some time, since after I had some network issues with netcat keeping open, I created my own “reverse-shell” for this.
It’s far from good, but I thought the idea was so laughable, that i just had to do it.
You can see it at : GitHub - blaudoom/HTB_obscurity
zip protected by root-flag
Also spent too much time not reading filenames properly and mistook the py in the home folder for the server-script. I was looking all over the server for the file
@clubby789 Good first box IMO
Edit: Have to add that, eventough the root was easy, it was very current.