Web Fundamentals: Pickle Rick (TryHackMe)

This article will cover the Pickle Rick write-up under the Web Fundamentals on THM.
Pickle Rick
This Rick and Morty-themed challenge requires you to exploit a web server and find three ingredients to help Rick make his potion and transform himself back into a human from a pickle.
Deploy the virtual machine on this task and explore the web application: MACHINE_IP
Answer the questions below
What is the first ingredient that Rick needs?
mr. meeseek hair
Note to self, remember username! Username: R1ckRul3s Password: Wubbalubbadubdub
gobuster dir -uhttp://IP_ADDRESS-w /usr/share/wordlists/dirb/common.txt -x txt,php,html,js
going to: http://IP_ADDRESS/login.php opens the Portal Login Page



/portal.php
comment:
Vm1wR1UxTnRWa2RUV0d4VFlrZFNjRlV3V2t0alJsWnlWbXQwVkUxV1duaFZNakExVkcxS1NHVkliRmhoTVhCb1ZsWmFWMVpWTVVWaGVqQT0==sudo -lMatching Defaults entries for www-data on ip-10-10-113-235: env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User www-data may run the following commands on ip-10-10-113-235: (ALL) NOPASSWD: ALL




What is the second ingredient in Rick’s potion?
1 jerry tear







What is the last and final ingredient?
fleeb juice

Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the Lab THM challenges.




