---
title: "Discussion on \"TryHackMe : Beach Bar Writeup\" | Hashnode"
description: "Discussion on \"TryHackMe : Beach Bar Writeup\". Complete Beach Bar THM walkthrough covering Flask YAML deserialization, RCE, privilege escalation, and full root compromise."
url: "https://hashnode.com/posts/tryhackme-beach-bar-writeup/6a7166c034de950fe31a3bdb"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [TryHackMe : Beach Bar Writeup](https://exploitnotes.hashnode.dev/tryhackme-beach-bar-writeup?utm_source=hashnode&utm_medium=feed)

Complete Beach Bar THM walkthrough covering Flask YAML deserialization, RCE, privilege escalation, and full root compromise.

Aug 4 · 7 min read · exploitnotes.hashnode.dev  
Read the article

-   [#beach-bar](https://hashnode.com/tag/beach-bar)
-   [#beach-bar-thm](https://hashnode.com/tag/beach-bar-thm)
-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#thm](https://hashnode.com/tag/thm)
-   [#thm-writeup](https://hashnode.com/tag/thm-writeup)
-   [#flask](https://hashnode.com/tag/flask)
-   [#pyyaml](https://hashnode.com/tag/pyyaml)
-   [#yaml-deserialization](https://hashnode.com/tag/yaml-deserialization)
-   [#unsafe-deserialization](https://hashnode.com/tag/unsafe-deserialization)
-   [#remote-code-execution](https://hashnode.com/tag/remote-code-execution)
-   [#rce](https://hashnode.com/tag/rce)
-   [#python](https://hashnode.com/tag/python)
-   [#web-exploitation](https://hashnode.com/tag/web-exploitation)
-   [#privilege-escalation](https://hashnode.com/tag/privilege-escalation)
-   [#linux-privilege-escalation](https://hashnode.com/tag/linux-privilege-escalation)
-   [#gunicorn](https://hashnode.com/tag/gunicorn)
-   [#security-misconfiguration](https://hashnode.com/tag/security-misconfiguration)
-   [#default-credentials](https://hashnode.com/tag/default-credentials)
-   [#password-reuse](https://hashnode.com/tag/password-reuse)
-   [#secrets-exposure](https://hashnode.com/tag/secrets-exposure)
-   [#process-arguments](https://hashnode.com/tag/process-arguments)
-   [#linpeas](https://hashnode.com/tag/linpeas)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#owasp](https://hashnode.com/tag/owasp)
-   [#ctf](https://hashnode.com/tag/ctf)
-   [#writeup](https://hashnode.com/tag/writeup)
-   [#cyber-security](https://hashnode.com/tag/cyber-security)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)

## Written by

[Yogeshwar Peela](https://hashnode.com/@exploitnotes)

@exploitnotes · Vishakapatnam, India

  
[View profile](https://hashnode.com/@exploitnotes)

I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking

## Responses

Markdown supported · ⌘↵ to post

No responses yet.