Easy
Linux
Horizontall Writeup - HackTheBox
Exploit Strapi CMS RCE on a subdomain, gain shell, then pivot via SSH tunneling to attack a local Laravel app for root.