TryHackMe : Beach Bar Writeup
TL;DR Beach Bar is a Flask-based "DJ booth" web app for a beach bar jukebox. Default demo credentials (dj/dj) left enabled in an HTML comment get you into the dashboard, which exposes a YAML playlist
#beach-bar#beach-bar-thm#tryhackme#thm#thm-writeup#flask#pyyaml#yaml-deserialization#unsafe-deserialization#remote-code-execution#rce#python#web-exploitation#privilege-escalation#linux-privilege-escalation#gunicorn
Responses
Markdown supported · ⌘↵ to post
No responses yet.