Web Fundamentals: Pickle Rick (TryHackMe)

Table of contents

This article will cover the Pickle Rick write-up under the Web Fundamentals on THM.
Pickle Rick
This Rick and Morty-themed challenge requires you to exploit a web server and find three ingredients to help Rick make his potion and transform himself back into a human from a pickle.
Deploy the virtual machine on this task and explore the web application: MACHINE_IP
Answer the questions below
What is the first ingredient that Rick needs?
mr. meeseek hair
Note to self, remember username! Username: R1ckRul3s Password: Wubbalubbadubdub
gobuster dir -u
http://IP_ADDRESS
-w /usr/share/wordlists/dirb/common.txt -x txt,php,html,js
going to: http://IP_ADDRESS/login.php opens the Portal Login Page
/portal.php
comment:
Vm1wR1UxTnRWa2RUV0d4VFlrZFNjRlV3V2t0alJsWnlWbXQwVkUxV1duaFZNakExVkcxS1NHVkliRmhoTVhCb1ZsWmFWMVpWTVVWaGVqQT0==
sudo -l
Matching Defaults entries for www-data on ip-10-10-113-235: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User www-data may run the following commands on ip-10-10-113-235: (ALL) NOPASSWD: ALL
What is the second ingredient in Rick’s potion?
1 jerry tear
What is the last and final ingredient?
fleeb juice
Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the Lab THM challenges.
Subscribe to my newsletter
Read articles from J3bitok directly inside your inbox. Subscribe to the newsletter, and don't miss out.
Written by

J3bitok
J3bitok
Software Developer Learning Cloud and Cybersecurity Open for roles * If you're in the early stages of your career in software development (student or still looking for an entry-level role) and in need of mentorship you can book a session with me on Mentorlst.com.