Curling

User and root flags obtained. Not elegant, but effective. I think this is a pretty decent beginner box. It’s thorough recon all the way through. A little one-line shell scripting at the end was helpful.