Writeups

Writeups from CTF, Hack The Box and other cybersecurity challenges. Platform, category, difficulty and detailed resources.

Platform
Hack The Box Medium

DevHub

From anonymous RCE on an MCP server all the way to root: leaked Jupyter tokens, code execution over WebSocket and a hidden tool that dumps root's SSH key.

MCPJupyterWebSocketRCECVE-2026-23744
Read →