Got user. ■■■. I already learned I shouldn’t take for granted any knowledge I suppose I do know as I was forced to start from very beginning of XML tutorials to learn, how to do this injection. @lokori, you devil!
Now working on priv esc. Great box. Really nice CTF design!