Finally rooted. Sometimes angry about the trolls but its a good box and I learned a lot.
A lot of work from the creator to make the box not so CTF. Thanks to you @3mrgnc3.
my hints :
foothold
As usual, enumeration is the key, as I say previously, if the clown is bothers you, tell him to stay at home. Be careful for browser issues, monitor traffic with burp, zap or firefox debug tools and understand what the HTTP talk mean.
As say previously, the clown can guide you.
When find the nurse, everything are say here.
Next, follow the white rabbit, if you want c**** something, be careful about your tools.
user
Now, you got a little access, so my technique was to script my enum to avoid big manual and repetitive task, you will save time (network analysis will give you a way).
You will find a weak that lead you on the hole. Remember that an old bug can stay on a recent system.
root
If you find something that don’t work out of the box, maybe it can work with a a little more effort (nothing in this box is obvious^^).
Thanks to @Sh11td0wn for his help !