Easy
Windows
MonitorsFour Writeup - HackTheBox
SQL injection in Cacti leads to RCE, followed by port forwarding and privilege escalation techniques to fully compromise this Windows machine.