Very cool box. User was a bit hard for me, been there for few days. Root was really easy, took me around a minute to own it. Going in again for the higher port and trying to get root without exploits.
User:
Make sure you know how the timing in python works and how it works in php. There’s kind of delay there. Make sure you’re listening to the port while looking for the file. If you read the script you’ll realize that its loads the page anyways