Rooted, it was a fun easybox!
Foothold/User: read carefully output from initial enumeration. After you understand what you can do, be curios to see where you can look into. When you arrive in a certain place the steps to gain access to box are simple, basic exploit
Root: classical enumeration script will let you know where to look into. There are several ways to conclude, all documented in google.
Thanks for the box!