Just because a server is headless does not mean that it isn't interactive in some way or running some user-submitted scripts or code. Also, compromising a serv

Just because a server is headless does not mean that it isn't interactive in some way or running some user-submitted scripts or code. Also, compromising a service running as a user (not root) would be sufficient to then escalate.