Travel

@all said:

OK, great. Looked through threads here and hints are too cryptic. My line of thought is perhaps there is something there in r** page and j**n *pi

It kind of depends on where you are stuck. User is a lot harder than root here.

If you are looking for user - enumerate it a lot, find something, dump it and read it. By reading it you should get an idea about what is vulnerable in the code, then you can build an attack to exploit this. I found this step very hard with a lot of trial and error to get the right syntax.

Eventually, this gets you a foothold. More enumeration, find something which allows you to connect properly with a real shell and you can get user. Privesc is, compared to that, quite straight forward.