@MrRobotty said:
I got a reverse shell and user.txt, to find root.txt is needed an exploit to priv esc? All exploits I’ve tried are not working…
You could attempt exploits, they might work. Keep enumerating and looking for things that look out of pllace.