Fun machine, to be honest there were things I did not expect and made me feel like: ‘wtf’…
As a hint for all the people not knowing where to look for Mangos… If you’ve found the Login page, think about how Login normally works, think about where the username and password are checked, data persistence bla bla bla… this should be enough to get your Mango going. This is for user.
For root flag, start snooping around the system, see what you find and might be helpful, #gtfobins.
Cheers to @MrR3boot for this machine 