foothold: public exploit with a little tweak
root: 1. understand the infrastructure of box
2. look in the files closely
3. if you are a linpeas user then you will get it quickly
4. once you are at the perfect stage, google is your friend on the way to root
just search properly. all the best