Pickle Rick

Tasks: Rick lost his password and needs 3 ingredients

nmap scan: See Pass 1

Gobuster scan:
/assets
/login.php
/robots.txt

Findings:
Found Username: R1ckRul3s in page source
Found Wubbalubbadubdub in robots.txt

Logged in w/ cred to /portal.php

You can execute some commands but not others

When the .txt is entered in the URL we get the first ingredient

The clue.txt says to look around some more

using sudo and less I was able to find the 3rd flag

the 2nd was in ricks home folder

Leave a comment