TryHackMe: Pickle Rick

Having fun with TryHackMe again. So, here is the write up and guideline to pass this challenge. Just simple task but there is a lot actually to do..

Room: https://tryhackme.com/room/picklerick
Level: Easy

Task: This Rick and Morty themed challenge requires to exploit a webserver to find 3 ingredients that will help Rick make his potion to transform himself back into a human from a pickle.

Lets get started

There is only 1 task available consist of 3 questions. The hint shows that need to explore the web application. From the browser,

by the wording burp, it must say need to use burp. But I not quite know how to use Burp suite. Let’s find another way, inspect the page first

In the source code, there is hint show the username. But still don’t know where to use. Let’s use dirb, okadminfinder and nmap together.

# nmap -A -T4 10.10.X.X