Got a root shell. Awesome little box. Very simple in hindsight, but it took me a long time to get anywhere because of basic enumeration failures on my part. So if anything, thumbs up for the lesson in humility.
Hints: You really do not need anything more than what’s already in this thread.
“We strongly suggest you to change your password as soon as you get in the box.” - did nobody ever hahaha
also, thanks for the win 
Rooted 
This was a lame way to get user.
root was ok.
Can anyone PM me about user? I have an idea but it’s just syntax I’m stuck on
I’m probably missing something because i can’t find a way to user… (i have a ssh shell as 10…2)
Any hints please ?
Stuck on user too… do I have to do something with the r****_**q file? Please PM me.
@laed2 said:
Stuck on user too… do I have to do something with the r****_**q file? Please PM me.
I don’t think so, it’s an empty file if you don’t put your own ip on it using the webpage. It will remove your account and create it again.
Any advice for user? Nothing obvious beyond brute-forcing the hash which appears to not be the way forward.
Spoiler Removed - Arrexel
Spoiler Removed
aaittt
crack it
backup.7z isn’t dead end
I am stuck on escalating from the restricted initial shell. Capabilities isn’t helping me here. Any assistance with pointing me in the right direction would be greatly appreciated.
@3poke said:
crack it
Done! thanks! I was procrastinating on bruteforcing haha
@legerdemain said:
I am stuck on escalating from the restricted initial shell. Capabilities isn’t helping me here. Any assistance with pointing me in the right direction would be greatly appreciated.
+1 me too:))
Rooted very good box 
user part is tricky if it seems very easy look for another user
root part just exploit what you have in front of you
Got root. Much thanks to @3poke