Rickandmortysbiggestfan.zip File

Use the credentials found in the web enumeration to log in via SSH or check the 9090 service. Flag 2: Frequently found in the user's home directory. 4. Privilege Escalation

gobuster dir -u http:// -w /path/to/wordlist.txt rickandmortysbiggestfan.zip

Often located in a hidden directory found via enumeration (e.g., /passwords.html or /image.png containing text). 3. SSH Enumeration (Port 22/9090) Use the credentials found in the web enumeration