Poison

I am able to see the passwd file in the system and struggle to proceed from there. is ssh brute force required for this challenge?