Rooted. Thanks to @egotisticalSW and @felamos for this box! It’s my first time exploiting something in that language, so I’m glad I learnt something new.
User
Really the best thing you can do is Google the ■■■■ out of that service and play around with your findings. You’ll eventually find an exploit that works.
Root
Actually easier than user imo. Just your normal privesc techniques.
Feel free to PM for nudges or to discuss this box