And rooted !!!
Fun little box, really enjoyed this easy but interesting ride 
My hints:
FOOTHOLD: OSINT, look about the author’s goto choice in backdoor
USER: The thing lies right in front, just learn the basics and exploit
ROOT: Look at the processes and don’t miss out on your permissions
Feel free to DM if you are stuck !!!