🔒

Machine Still Active

DevHub Machine (HackTheBox) — Step-by-Step Walkthrough

DevHub is a Linux machine compromised via CVE-2026-23744, an unauthenticated RCE in MCPJam v1.4.2, followed by lateral movement through an exposed Jupyter Lab instance with a plaintext token, and privilege escalation via a hardcoded API key in an internal Flask service running as root.

hackthebox linux Machine medium mcp rce jupyter lateral-movement privilege-escalation

$ This machine is currently active on HackTheBox. The full writeup will be published once it retires.
// Check back later