Got user - now onto root
IF you are having issues with some things not authenticating, i found leaving it for an hour or so then doing a reset on the box helped.
Initial Foothold -
Step 1: its quite simple - enumerate the usual way. The school canteen often served soda.This can make you BURRRRRP.
Step 2: If you don’t have all the details you need - script it to get that last bit (took me 10 mins using python).
DO NOT BRUTE FORCE. it is NOT needed - but you can use the same tool to confirm it using the info from step 2
Step 3: - now is the time to get EVIL
User : I have to disagree with some of the comments here. the service isn’t interesting as such - its integral to something you found in step 3. If i had employed the person who implemented this they would now be on a warning for being lazy and not security aware.