Type your comment> @TazWake said:
Not every box has a path to NT AUTHORITY\SYSTEM access. Arbitrary file read of sensitive data isn’t “nothing” though. And, fundamentally, the scope of the HTB task is to read the flag so thats job done.
Yeah, I agree with you, definitely always learning new stuff and i was like "maybe there is sneaky way "