https://polymathmonkey.github.io/weblog/tags/detection-engineering/index.htmlHugoen-usThu, 18 Jun 2026 09:28:29 +0200https://polymathmonkey.github.io/weblog/writeups/htbsilentium/index.htmlSun, 14 Jun 2026 09:26:00 +0200https://polymathmonkey.github.io/weblog/writeups/htbsilentium/index.htmlNote I put this writeup in my security research section, thats just for convince. Later on I will create a section for all my writeups to come. Overview Attribute Value OS Linux Difficulty Easy Category Web + Privilege Escalation Key CVEs CVE-2026-40933, CVE-2025-8110 Techniques Auth Bypass, MCP RCE, Symlink Abuse, Git Hooks Silentium is a two-stage exploitation box combining web application authentication weaknesses with a privilege escalation chain through Git hook manipulation. The path to user involves bypassing Flowise authentication and exploiting an MCP (Model Context Protocol) server vulnerability. Root escalation leverages Gogs repository management running with elevated privileges.