That was an awesome box. Privesc ended up being pretty simple, but learnt some more post-exploitation enumeration tricks!