Rooting DC-4: Brute Force, Leaked Mail, and a Custom Sudo Binary

No CMS this time. Just a login form, a chain of recovered credentials, and one unusual sudo rule that gives away the whole box.