RE

Good box. Massively overcomplicated the initial entry point. Top tip, dont use ping to confirm code execution this time!

Path after user is interesting. I ended up on an unintended path which has it’s own issues.