Challenge

robots.txt held fsocity.dic and key 1. Brute forcing WordPress off that list found Elliot:ER28-0652. A 404.php reverse shell caught a shell. robot’s md5 password cracked to abcdefghijklmnopqrstuvwxyz (key 2). Old nmap had the SUID bit.

nmap --interactive
!sh

Root, key 3 in /root.