...capturing the credentials of web app on a apache web server/cloud provider (i prefer cloud) which runs wordpress site, by using the knowledge from the items above (and using some Kali tools like Social Engineering tool is not counted!) and as post exploitation accessing other services (e.g. databases or endpoints), you have to be able to provide me the environments
deliverables should be in zip file and ready to use . so that I can extract and use it. you can use Oracle virtual box or VMware workstation or player that is your choice.