Machine Rooted in about 7 hours,
Foothold : Do enumeration and web enumeration, look at your request, and check some cve
Users : enumeration script will do the trick but the intendend way is a little bit different. enumerate usersss one by one.
Root : Simple as a easy machine and already say.
Info : There is some rabbit hole.
Thanks for the challenge