What a ride guys, loved this box.
My 2 cents for user and root.
User: that username is always the same, how the ■■■■ is generated? try to find a way to understand it and you will be fine.
Root: well, prepare to try again and again, the box wants you to tell her that connections are coming from localhost, find how to do it and once you are in there is only one path to root, it is in front of you once you understand something about “dangerous” permissions.
Keep the good job @jkr !!
Cheers