Frustrating box for no reason, not much to learn here, I stayed more for the need to complete it.
Please do not reset the box it’s just frustrating for all.
For user many hints already shared.
For root, the exploit that you will find is poorly documented, read a bit on the .ini file to understand the structure.
One generic command and not essentially a hint but rather common knowledge:
ssh -l user IP -L 1234:127.0.0.1:8443
And connect from your local browser to port 1234 on your system.
Do not use localhost instead of 127.0.0.1, use the IP. localhost might be resolving locally on the ipv6 interface which in many cases comes into priority. By all means it does not ensure that a service is listening also to the IPV6 interface.