This is infuriating I don't even know how to get into their server. I can't find an unprotected subdomain.
Exactly. That's what they need you for: there isn't an obvious unprotected subdomain. What other tools do you have to gain VPN access?