-->

  • TryHackMe Pickle Rick Walkthrough







    Greeting there, it is time for another tryhackme CTF write-up. Today, we are going through the Rick and Morty inspired CTF room. This room is called pickle rickkkkkkkkkkkkkkkk. Interesting huh. This is one of the easiest  challenges on the site. Without further ado, let’s get into the challenge.TryHackMe Pickle Rick Walkthrough



    We need to find the three secret ingredients in order to turn Rick back to his old self. Rick mentioned something on the webserver. Let’s enumerate the machine by using Nmap scanner.


    nmap -A -Pn -sC -sV --script vuln 10.10.28.46







    Visit TryHackMe IP Address



    Look like a message from Rick. The three secret ingredients are inside Rick’s computer. I have to get it. Before that, let’s check with the source code for more information.






    username :-



    We have the username now. How about the password? Time to use the gobuster.


    gobuster dir -u http://10.10.28.46 -w /usr/share/dirb/wordlists/common.txt







    We got robots.txt file inside the webserver. Gonna check it out.




    password :-




    Let's use gobuster again via GUI based...






    Yup, we just missed the portal.php files. Time to visit the portal site.










    The portal site has been resolved into a login page. How about trying the login credential we found it earlier (user: R1ckRul3s, pass: Wubbalubbadubdub)?






    After Login


    [Task 1] Pickle Rick



    This Rick and Morty themed challenge requires you to exploit a webserver to find 3 ingredients that will help Rick make his potion to transform himself back into a human from a pickle.



    #1 Deploy the virtual machine on this task and explore the web application.

    What is the first ingredient Rick needs?





    ls -la

    less Sup3rS3cretPickl3Ingred.txt

    OR

    http://10.10.28.46/Sup3rS3cretPickl3Ingred.txt








    #2 Whats the second ingredient Rick needs?



    ls -la /home

    ls -la /home/rick

    less '/home/rick/second ingredients'




    There is another ingredient file hidden inside the file system. There might be another user inside the system.







    The second ingredient is inside the rick’s directory.











    #3 Whats the final ingredient Rick needs?




    I guess the next ingredient locate at /root directory. Before we make a visit to the directory, let see what we can do for the sudo command.



    sudo -l









    Cool, we can do everything using the sudo command. Let see what is inside the /root directory.



    sudo ls -la /root













    Yes, the third ingredient is inside the root directory.


    sudo less  /root/3rd.txt







    We are now gathering all 3 ingredients. yupeeeee!!!!






    Video Tutorial :soon otherwise search me on youtube kumar atul jaiswal

      

    Disclaimer


    This was written for educational purpose and pentest only.
    The author will not be responsible for any damage ..!
    The author of this tool is not responsible for any misuse of the information.
    You will not misuse the information to gain unauthorized access.
    This information shall only be used to expand knowledge and not for causing  malicious or damaging attacks. Performing any hacks without written permission is illegal ..!


    All video’s and tutorials are for informational and educational purposes only. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. We believe that it is impossible to defend yourself from hackers without knowing how hacking is done. The tutorials and videos provided on www.hackingtruth.in is only for those who are interested to learn about Ethical Hacking, Security, Penetration Testing and malware analysis. Hacking tutorials is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used.


    All tutorials and videos have been made using our own routers, servers, websites and other resources, they do not contain any illegal activity. We do not promote, encourage, support or excite any illegal activity or hacking without written permission in general. We want to raise security awareness and inform our readers on how to prevent themselves from being a victim of hackers. If you plan to use the information for illegal purposes, please leave this website now. We cannot be held responsible for any misuse of the given information.



    - Hacking Truth by Kumar Atul Jaiswal



    I hope you liked this post, then you should not forget to share this post at all.
    Thank you so much :-)






  • 0 comments:

    Post a Comment

    For Any Tech Updates, Hacking News, Internet, Computer, Technology and related to IT Field Articles Follow Our Blog.