Writeup and solution to the HackTheBox machine entitled 'TwoMillion'. In this writeup, we describe the vulnerabilities that allow the initial foothold and privilege escalation, and propose a set of mitigations.