Easy but nice box:) Here are some hints 
-Foothold : look at http headers, maybe a vulnerable service is present ?
-Privesc : the easiest part, just look at what this tool can do.
Easy but nice box:) Here are some hints
-Foothold : look at http headers, maybe a vulnerable service is present ?
-Privesc : the easiest part, just look at what this tool can do.