skip to content
~/bokkapig
_
machines
refs
tags
search
hack the box machine writeups
← cd ../tags
grep -l "MCP" ./machines
(1)
Kobold
[Linux]
Easy
2026-03-21
MCP Inspector STDIO RCE for foothold, PHP code injection in PrivateBin container to leak credentials, Docker escape via Arcane container management.
MCP
Docker
PrivateBin
PHP-injection
password-reuse
Arcane
● pwned