That was a fun box! I learned a lot gaining user, and the scripting part was great. Thanks @MrR3boot.
Hints: for user, use Burp and Wireshark to check requests and responses when scripting and make sure your request headers etc are correct. If the responses you’re getting aren’t working check bad chars.
Root: Basic enum.