THM Pickle Rick - grunt92/IT-Sec-WriteUps GitHub Wiki
Pickle Rick
What is the first ingredient Rick needs?
View the page source: You will find a comment that gives you a username:
R1ckRul3s
Enumerate the target using nmap and you will see that there is a ssh-port and an http-port open. Enumerate the site-directories using gobubster and make sure that you also look for txt,php and js-files. You will find a txt-file named "robots.txt" access the file and you get "Wubbalubbadubdub".
Note: Trying to connect to the ssh-port using the username and "Wubbalubbadubdub" as password will result in an error due to a missing publickey.
You can login to the site using the "/login.php"-site and you will get access to a command panel. By using ls
you get all files in the directory. You can access the files using your browser or by using less. In the file "Sup3rS3cretPickl3Ingred.txt" you get the first answer.
mr. meeseek hair
Whats the second ingredient Rick needs?
To get the second ingredient you have to look into other directories. To do so you can use ls
, ls ..
or ls /
to check out other directories. You will find a "home"-directory with a user named rick. And by using ls /home/rick
you will see a file name "second ingredients". By using less /home/rick/"second ingredients"
you get the second ingredient.
1 jerry tear
Whats the final ingredient Rick needs?
To find the third ingredient you have to check the "/root"-directory. To do so you can sudo ls /root
and you will find the "3rd.txt"-file. To open the file use sudo less /root/3rd.txt
and you get the 3rd ingredient.
fleeb juice