---
title: "Discussion on \"TryHackMe : Towel on the Sunbed Writeup\" | Hashnode"
description: "Discussion on \"TryHackMe : Towel on the Sunbed Writeup\". Complete Towel on the Sunbed THM walkthrough covering race conditions, TOCTOU exploitation, concurrent requests, and vault flag recovery."
url: "https://hashnode.com/posts/tryhackme-towel-on-the-sunbed-writeup/6a71f33420b4883bd91e12d1"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [TryHackMe : Towel on the Sunbed Writeup](https://exploitnotes.hashnode.dev/tryhackme-towel-on-the-sunbed-writeup?utm_source=hashnode&utm_medium=feed)

Complete Towel on the Sunbed THM walkthrough covering race conditions, TOCTOU exploitation, concurrent requests, and vault flag recovery.

Aug 4 · 6 min read · exploitnotes.hashnode.dev  
Read the article

-   [#towel-on-the-sunbed](https://hashnode.com/tag/towel-on-the-sunbed)
-   [#towel-on-the-sunbed-thm](https://hashnode.com/tag/towel-on-the-sunbed-thm)
-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#thm](https://hashnode.com/tag/thm)
-   [#thm-writeup](https://hashnode.com/tag/thm-writeup)
-   [#race-condition](https://hashnode.com/tag/race-condition)
-   [#toctou](https://hashnode.com/tag/toctou)
-   [#time-of-check-time-of-use](https://hashnode.com/tag/time-of-check-time-of-use)
-   [#concurrency](https://hashnode.com/tag/concurrency)
-   [#business-logic-vulnerability](https://hashnode.com/tag/business-logic-vulnerability)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#nodejs](https://hashnode.com/tag/nodejs)
-   [#expressjs](https://hashnode.com/tag/expressjs)
-   [#authentication](https://hashnode.com/tag/authentication)
-   [#http-requests](https://hashnode.com/tag/http-requests)
-   [#parallel-requests](https://hashnode.com/tag/parallel-requests)
-   [#privilege-escalation](https://hashnode.com/tag/privilege-escalation)
-   [#vault](https://hashnode.com/tag/vault)
-   [#cyber-security](https://hashnode.com/tag/cyber-security)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#ctf](https://hashnode.com/tag/ctf)
-   [#writeup](https://hashnode.com/tag/writeup)
-   [#owasp](https://hashnode.com/tag/owasp)
-   [#api-security](https://hashnode.com/tag/api-security)
-   [#logic-flaw](https://hashnode.com/tag/logic-flaw)
-   [#burp-suite](https://hashnode.com/tag/burp-suite)
-   [#flag-recovery](https://hashnode.com/tag/flag-recovery)

## Written by

[Yogeshwar Peela](https://hashnode.com/@exploitnotes)

@exploitnotes · Vishakapatnam, India

  
[View profile](https://hashnode.com/@exploitnotes)

I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking

## Responses

Markdown supported · ⌘↵ to post

No responses yet.