Magic

Got root! It was a very funny box.
Foothold: OWASP enumeration.
User: Understand how it works.
Root: At first I was at a loss and spent a lot of time to understand how it works, but then I found the true path.
PM me for hints