This wasn't an easy one, but I'm glad I did it. These bumpers will be rusting out in time (like everything else).
The rear bumper is held on with six flat, torx-head, bolts (on top) and two 13mm bolts (underneath).
The hard part is removing the plastic bumper cover.
First remove the plate lights and spare tire lock.
Now the hard part...
This is held in place by 16 molded-in plastic fingers that push into slots on the bumper. This is what they look like. A pair of 6" slip-joint pliers works perfectly to squeeze them as you push up, (start at one end).
Be patient, and try not to break 'em....a new bumper cover is $142.
Now with that removed, you can get at the top bolts.
Here's some pics of the rusty back:
I used my grinder and wire wheels to clean it up...
Prior to removing the plastic cover, I marked where it covers the bumper, so I could paint under it. I did this with POR-15.
While I was at it I removed the rear, plastic rocker covers.
The dirt was held in there.
I also masked and painted under these areas, (Rustoleum Hammered Silver).
And lastly, while the bumper was off, I POR-15'd the bumper support/tow hitch.
Thanks for looking, and good luck with your project!