Forest

Type your comment> @TheRamen said:

Can anyone give me a nudge for user? I have all the open ports, see all the services. Everything I look at needs a user/pass, is the only way in via user/pass lists or bruteforce?

Bruteforce = Nope (bad mojo, especially for easy\medium machines)
Try and enumerate users, see what you can find.