As said here what a fun and challenging box!
User - Enumeration is key. Look at what you can do on the open ports. Here may lie some interesting files.
Root - Again enumeration is key, maybe use some of the same methods as user (with some slight changes perhaps).
Thanks @VbScrub for the box. Also thank you to @salt for the invaluable hints.