Rooted, learnt a lot.
For those in trouble with this box, these are my hints:
- for the enc file, “go for bruteforcing”
- once you access the web portal, google for a way of reversing
- for root, you need creds in a certain file that it’s pretty straightforward to find
- poison way