Hello everyone,
Very frustrating 
. It’s been a few days that I’ve been messing with this box. Getting user.txt was relatively quick, but I only had it through LFI, and not because I actually owned user. Tried a bunch of scripts, tried messing with some logs, tried enumerating manually with whatever makes sense, and I actually did find another webpage that the enumeration didn’t find.
Still have no f’in clue how to get shell.
Please halp