Nice challenge! My hints would be watch out for rabbit holes (I seem to always waste time with them) the solution is right at your face. 
Focus on exploiting it locally first and then go for the remote instance (using NC, PUTTY or the like…).
Nice challenge! My hints would be watch out for rabbit holes (I seem to always waste time with them) the solution is right at your face.
Focus on exploiting it locally first and then go for the remote instance (using NC, PUTTY or the like…).