fun box
user was too easy for a medium box, if you are stuck think simple
I couldn’t spot the vulnerability for root at first, but once the hints on the forum were very useful and once you find the poc you only need to add one thing to connect.
hit me up here or on discord if you need hints.