got r00t. I found an easier way to pwn the admin account which didnt even require me to interact with the powershell or do any exploitation.
Hints :
user - enumerate, do google researches on what you can get from the services in the open ports.
r00t - impacket. Play with the tools. It’s so simple. Just learn what they do and you will know which one you need
Great Box.