We know user is admin on web portal and compta is used in ssh

Simple bruteforce with rockyou: admin:iloveu SSH basic privesc get you root flag as well -

user.txt - V5yJjLwYwf root.txt - 0YMcbdyrfQ