HTB: DevHub
DevHub is a box built around MCP servers, the protocol that AI agents use to reach tools. I’ll find an MCPJam inspector listening on all interfaces and abuse an unauthenticated endpoint that spawns a process from an attacker-supplied command, getting remote code execution and a shell. From there I’ll find a Jupyter Lab instance bound to localhost with its access token sitting in both the systemd service file and the process list, and tunnel in to pivot to the next user. That user holds the API key for an internal MCP server running as root, which offers an undocumented tool that dumps root’s private SSH key.
https://0xdf.gitlab.io/2026/10/10/htb-devhub.html
0xdf Hacks
npub12n…65xet
2026-10-16 03:59:35 UTC
Author Public Key
npub12nhjhydrhzfjfa9caqm45p6r80zewx33a0j9akxag4k069h6z9ws565xetSeen on
wss://relay.mostr.pubPublished at
2026-10-16 03:59:35 UTCEvent JSON
{
"id": "feba19ab10ff810dc91c2911088855918a9ec66239e6202a818f878fa7d93a1a",
"pubkey": "54ef2b91a3b89324f4b8e8375a07433bc5971a31ebe45ed8dd456cfd16fa115d",
"created_at": 1792123175,
"kind": 1,
"tags": [],
"content": "HTB: DevHub\n\nDevHub is a box built around MCP servers, the protocol that AI agents use to reach tools. I’ll find an MCPJam inspector listening on all interfaces and abuse an unauthenticated endpoint that spawns a process from an attacker-supplied command, getting remote code execution and a shell. From there I’ll find a Jupyter Lab instance bound to localhost with its access token sitting in both the systemd service file and the process list, and tunnel in to pivot to the next user. That user holds the API key for an internal MCP server running as root, which offers an undocumented tool that dumps root’s private SSH key.\n\nhttps://0xdf.gitlab.io/2026/10/10/htb-devhub.html",
"sig": "58626a7d3dd82234f3c2ff97766e06cab75ea5286ebe8136490b6147613a80dbe97a1d69e5ace28430a48b77abf1202dc4efb02850896908dfd1d058dfe9dfa8"
}