Hackthebox blunder writeup