Mango was the first Hack The Box I got user-level access to! Here's how I used nmap, tls certificates, and NoSql injection to get access to the box.