Luckily getting a shell was easy thanks to hints left regarding i** and then enumerating the possible ports that service would use. This matched up to a nicely to a msf module.
Finding the .b**** file was a bit tricky but I was able to figure out what it meant after reading “steg” on the forums here it hit me what it was. Pretty cool stuff using that tool.
And MANY thanks to @masterrabbit for the hint on how to get root. I had to do some enumerating over and over and then saw the binary that isn’t a normal one.