Damn this box was the hardest medium box this is some hints for you
foothold: the service which this machine provides is like famous service we know! , you can use google dorks for searching about some “endpoints” in the text!
user: it’s easy just analyze what you have and start trying!
root: it is something obvious but RTFM!, and understand what it does and try to exploit it!
for nudges pm me