HOLY ■■■■ I’m so glad I rooted this box. I may have gone about rooting it in an unconventional way but I figured out the basic gist of it and managed to get it. Took me about 4 days but I figured it out. I learned quite a lot about a protocol I didn’t have much experience in in the first place. Still though, I can’t wait to see the writeups on this box after it gets retired so I can see how I managed to do it versus everyone else.
Initial foothold was straightforward, par for the course if you’re used to a lot of CtF scenarios. But the privesc…man. Good challenge!