Hint for TartarSauce!

nvm got the root flag without shell
This machine reminds me exactly of an OSCP exam machine. Just keep enumerating till end. I am happy that I didn’t stop enumeration during exam.
Priv esc is so much mind f***