Got a shell as NT after exploiting the con****.h*** and sa*e.**p pages and being able to trigger c*d inj***ion. Found two files r**.txt - which pointed me to a different subdomain - and a kn**_h**ts. It seems like we are inside a con***ner, but I can’t really figure out what to do next. I saw some articles on escaping with s**links, but I haven’t managed to get it working. The new subdomain inside the **q.txt file also hasn’t led me anywhere yet. Any hints?