Hi there. I am working on Querier. I have access to xp_cm*****l and I can read the user flag. Now to start some enum for root, I am trying to find ways to spawn a reverse shell. I tried f*p transfer but it failed. Can you please give me a nudge to get a reverse shell?