Feed
Pro
Search

Sign in
FactoryKit - the AI software factory: tasks in, pull requests out Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

Discussion on "TryHackMe : Beach Bar Writeup" | Hashnode

FeedDiscussion

Yogeshwar Peela

7h ago

TryHackMe : Beach Bar Writeup

TL;DR Beach Bar is a Flask-based "DJ booth" web app for a beach bar jukebox. Default demo credentials (dj/dj) left enabled in an HTML comment get you into the dashboard, which exposes a YAML playlist

exploitnotes.hashnode.dev7 min read

#beach-bar #beach-bar-thm #tryhackme #thm #thm-writeup #flask #pyyaml #yaml-deserialization #unsafe-deserialization #remote-code-execution #rce #python #web-exploitation #privilege-escalation #linux-privilege-escalation #gunicorn #security-misconfiguration

Responses

No responses yet.

#default-credentials

#password-reuse

#secrets-exposure

#process-arguments

#cyber-security

#penetration-testing