Creating your own username and password instead of the current ones is probably the hardest thing in this box.
Maybe the first RCE can be challenging but user is straight forward from there and root was FUN.
EDIT: someone was claiming that root is possible without getting user. I would love to learn how can that be accomplished if anyone was able to really do this.