Hey, I had just completed The room of Pickle Rick this was quite simple!BUT! has a different logic which made me interesting to solve this.So folks go ahead and deploy the machine the show is about to start.
first is first! here comes the nmap scan which give us information regarding the IP address.
so from this scan we got to know that there is an site hoisting on it.
Help Morty! hmm… okay what next? I had opened the source code and found an user name.
so from this basic knowledge we can say that there is a login page for it then i had login.php to the URL and yes my guess was right there was a login page.
wait a second! now where is the password? as I had solved some web challenges I had an idea of using gobuster or dirsearch , with the help of this you can find out the basic extensions available.
so i found that robots.txt is working so i had opened it and there i found a password.
so now you have the login credentials so what are you waiting for? go ahead and login.
here you would be provided with a command panel then use a basic comand to list all directories and files “ls -al” then found this on the top there was something named “Sup3rS3cretPickl3Ingred.txt” so just run this in your URL tab you would get the first flag:-
Task 2:- Whats the second ingredient Rick needs?
So here we have to find out what is the second ingredient does rick need?huh!
so there was a clue which told us that to “Look around the files”
then I had started to move around the directories so after little time I had found it in a home directory of rick.
so with the comand “cd /home/rick; ls -al ;pwd”. I went through the Directory and found this.
so what are you waiting for just print it with commnd:- less /home/rick/”second ingredients” :- here is your second flag after using that command.
Task3:- Whats the final ingredient Rick needs?
so its time for final ingredient.After solving many rooms i had an guess that it might me in the root. so first i had to check out that what we can do with sudo. so I had listed the permissions available. “sudo -l” .
so there is no password for the root directory so just drive into it by the help of sudo command.
There you go…! 3rd.txt now just print out the data with The command :-sudo less /root/”3rd.txt”.
you finally made it man I strongly appreciate your patience.
And thats it for pickle rick so now rick is going to prepare it with the ingredients he got.