User is fairly easy, also remember that as per ‘machine submission rules’ no heavy cracking should be required on HTB, only common passwords are accepted; if you see a hash, it either can be cracked in minutes or it’s useless.
but I am really hoping this box is not all about A**** for root…my head hurts already