Postman

Looking for a way forward, i feel the answer is staring me in the face.

Gained an initial low priv shell through well known R**** vuln and found i*****.bak, retrieved the pw.

Tried SSH with M*** and pw, no joy.
Logged in to web int with un and pw and tried various exploits with M***t against W, getting errors

any nudges would be appreciated.

Muchas Gracias