Friggin finally. Wow. Tips:
Foothold: Dirbuster wont help you get every directory, listen to your teachers. The CVE is a good “resource.” Encryption might help you in the long run.
User/Root:
What’s the sketchiest looking thing in your enum?
Thanks everybody for all of the hints! Always a good time piecing everything together.