A nice box overall. Got me confused a bit (my comment above), but really enjoyed it. This was also the box that finally ‘forced me’ to set up a Windows attacking machine. Had to be done so happy about that. I think enough has been said about user, and once you get user access, the alternative solution (already mentioned above) will provide you with the ‘vulnerable’ method that will give you root access.