And done !
Everything you need is in this thread
User : Enumerate and then enumerate again
There are a few rabbit holes granted but if you keep digging you’ll find what you need
At the point of RCE - make sure your payload isn’t too basic (cant really say more than that without ruining it)
Root : Surprisingly easy compared to user - check the information filled files. You should enumerate these files every time you log into a new box !
Thanks to those for the sanity check with regard to RCE - you know who you are