Liked this box in the end. Found it easy until I got stuck at a brick wall. In the end I needed to be a little more observant to see the differences to find the right page. Once you find the right syntax for the traditional attack, and then a bit of research to be able to extract more data, moving from user to root isn’t too bad at all.