Tryhackme Pickle-Rick Writeup

Tryhackme pickle rick step by step writeup

Link to the room : https://tryhackme.com/room/picklerick

This is the http page for the machine! :-

Lets run a nmap scan to know more!

As only 2 ports are open lets try to find more directories!

robots.txt seems interesting, Lets check it out!

Let me check the source code of the page first, to see if i get anything potential!

I got the username!

Now lets check the robots.txt.

Seems interesting

Lets try to ssh using the username and the string we got in the robots.txt

ok

Why not find login panels in the web?, Lets do it.

Great so we got an login panel

Lets use the credentials we got earlier!

Great so now we have command line interface lol.

Lets ls quickly! Woah!, lets try to access it via browser as its in the same directory!

Great!

Lets check clue.txt now.

Ok so basically we’ll need a shell in order to navigate through filesystem effeciently!

We have a good resource for shells : gtfobins.github.io

I just modified it little bit, to make it short and easy! First run the netcat listener to start listening for the reverse shell in the attacker machine!

Now run the payload in the command pannel.

Great, so now we have a reverse shell!

Lets check for users in the home directory!

Greaat we got our second ingredient!

Lets try to sudo su to see if we get root acces?

Great we got the root acces and also the third ingredient!