ROOTED!
I really enjoyed this box! Nice techniques and I learned a lot! The user part was more difficult than root but I loved the privesc both user and root
- Foothold: you just have to upload something well crafted
- User: not so easy to me, try to understand what php files do and which function you can exploit
- Root: quite easy, first you have to understand what your user can execute and then exploit it
I hope this doesn’t spoiler too much, otherwise feel free to remove my comment.
PM me if you need hints