I got RCE and spent the past 24 hrs hammering away at this with all my network-fu , I thought I had the plumbing all sorted out but I’m starting to think that is not the way to go on this . I’m trying not to be disruptive so have been very subtle with “engineering” as if this was a production environment , can someone PM me / give me a nudge to confirm that a more aggressive approach is the right way to ‘hijack’ the root flag on this box ?