HTB: BountyWindows machine demonstrating IIS upload bypass with web.config abuse and kernel exploit privilege escalation.