Attempt to gain initial access through external-facing services. Consider: - Exploiting vulnerabilities in the WordPress site to gain a web shell. - Leveraging discovered credentials from OSINT or breach data against the VPN or Outlook Web Access. - Exploiting API vulnerabilities in `api.medsecure.e