@UserAlpha said:
I got user.txt (without gaining a shell onto the box). Do you require an existing shell to get root or is the information available through xml enough?
Think of ways, how you can login to a machine. You don’t have to pop a reverse shell.