Bashed privesc

So I after not giving up (yesterday ended with around 24 hrs up), got the flag, but priv esc was minimal and never got a full meterpreter reverse (just echo’d bash). I know some people have asked about potential openings. I abused the hole to get the flag, but was there a different methodology that was cleaner/more clear?

Anyone that has thoughts, please feel free to PM