Official Armageddon Discussion

foothold: enumeration and cve
user: more enumeration (pay attention to whats running on the machine)
root: pretty straight forward (as @AbuQasem already said, a vulnerability that existed in prior versions can help you a lot…)