Recon
Three machines on the network
One public pacing that's port forwarded
One is a internal git server (may have sensitive information)
One personal PC with AV installed on it
The (assumed) Windows PC cannot be accessed directly from the webserver
The webserver may be a Windows variant