I tried harder and got the login vuln sorted out… now working on RCE… this is fun! Next time, this may be a bit easier.