LOGIN BRUTE FORCING - Skills Assessment Part 2

Hi everyone,
I hope you’re all doing great!

I’m working on finding the flag in flag.txt. I successfully identified the username “Thomas” but I’m struggling to find the password needed to access the flag.

Can anyone provide hints or guidance on how to proceed?

Thanks in advance!