Rooted. I learnt a lot, thanks to the creator of the machine.
User: automatic enumeration and brute force are enough to get the credentials.
User2: enumerate what you cannot see.
Root: check privileges, google and create your payload. Msfvenom is your friend.
If you need any nudge, feel free to PM me.