Credential Hunting: Linux PrivEsc

htb_student@NIX02:~$ cat wp-config.php | grep 'DB_USER\|DB_PASSWORD'

htb_student@NIX02:~$  find / ! -path "*/proc/*" -iname "*config*" -type f 2>/dev/null

htb_student@NIX02:~$  ls ~/.ssh