Note that there is a port open on 8081 that isn’t open externally
username:hAckLIEN password:YouCanCatchUsInYourDreams404
https://jaxafed.github.io/posts/tryhackme-el_bandito/#second-web-flag