Challenge

wfuzz found admin:my2boys on WordPress. Editing the Twenty Seventeen theme caught a shell. linpeas and /opt/wp-save.txt gave aubreanna:bubb13guM!@#123 (THM{int3rna1_fl4g_1}).

An SSH tunnel exposed an internal Jenkins. Fuzzing the login found admin:spongebob, the script console gave a shell, and /opt/note.txt held root:tr0ub13guM!@#123.