@pinnn said:
…
P.S. Why does this box have such a low rating!?
I have no idea. So far, I really like this machine, even though I still haven’t managed to root it.
Currently, my exploit works locally, but for remote I need yet another info leak, since I don’t get a vital gadget from libc. Unfortunately, I can’t use the same technique for leaking the other lib’s information 
But maybe I’ll just take another exploitation approach that doesn’t require r14 