Do Not Disturb — TryHackMe Hacker Holidays 2026 Day 7 Writeup

Day 7 boot2root walkthrough: $ne login bypass, EJS SSTI on /staff/preview, RCE, then root without uid=0 via node --inspect and the disk group. Flags redacted.