The shell script from @sparkla is very cool once you get a working webshell. Feels like a real shell, including proper formatting.
Stuck moving forward from here though.
Update: Moved forward, thanks to some nudges from @GPLO and @metuldann. Learned a new technique. Now on to the next user.
Update 2: Managed to get the user flag. Now trying for root. So far haven’t found anything “left behind” which can help me - any advice about where to look would be appreciated.
Found something. Now just need to make it work.
Finally got root. The last part is very cool. Thanks @D4nch3n for a great box - I learned a lot.