Hey all! Just finished rooting this box, thanks Xh4H for the fun machine!
My hints:
User: Not every webpage is as it appears… try inspecting further into the message left by the creator. Finally, google away! List out your ideas if it helps.
Root: Basic unix enumeration tools should help you here. Pspy is great and will help to know when your target is run so you can trigger it yourself.
Feel free to message me for any hints or nudges!