Rooted! Very nice box. the foothold and the not working Gobuster took me some time, but with a response injection i could fix it. The RCE was a nice experience. Decryption was also funny and a nice idea. the root part was the easiest one.
if anyone need a hint, just let me know.