Ok, I’m in the last bit but something ain’t right! Got foothold, user, found the .c* bit, created what I need using n***g/O-**M, but it keeps being deleted when dropped into the dir where the a-hole CEO asked for it. And it doesn’t matter what goes in there actually, it will be removed. Not a defender issue as well. If you have an idea what’s going on for me please PM.
Cheers
Edit: Thank you. I finally got it. So here are my 2c:
Foothold: RFI (the one that works even if remote URL inclusion is disabled)
User: what you have found is what you need, just find a way to use it
Root: go for the simplest option possible.