Postman

Rooted.
Really fun and relaxing box. Initial foodhold is the hardest part. User → Root is really easy.

Foothold: Enumerate. You’ll find something exploitable, but no exploits in the wild work. So read them, understand then. Try to exploit manually. Study exactly the service you’re exploiting. When you put 2 and 2 together, you’ll get it.

User: Basic enumeration and a well known script.
Root: Basic enumeration at step 1