Fatty

Got user! Fix the client, and get the server program. Audit code of server, you can see typical vulnerability in java, just exploit it.
Road to root, can’t figure next step, can anyone share some bints.