HTB — Nibbles

i Learned

• Enumeration — identify Nibbleblog and discover its version.
• Information disclosure — inspect users.xml to discover the username admin.
• Metasploit — configure and use the nibbleblog_file_upload exploit.
• Reverse shells — understand LHOST, LPORT, and Meterpreter sessions.
• Linux enumeration — use whoami, id, ls -la, and sudo -l.
• Privilege escalation — identify a root-executable script that is writable by nibbler.
• File handling — extract personal.zip to recover monitor.sh.

Try ViewPageSource

then submited user flag

export TERM=xterm

find root

when i was sudo -l see give a full path then find root