> ## Documentation Index > Fetch the complete documentation index at: https://rootea.es/llms.txt > Use this file to discover all available pages before exploring further. # Linux · Hard > Linux machines with Hard difficulty # Linux · Hard 32 machines in this category. | Machine | Skills | Writeups | | ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------: | | [AdmirerToo](/en/htb/machines/linux/dificil/admirertoo) | Remote Code Execution (RCE) · Subdomain Enumeration · Server-Side Request Forgery | 3 | | [Altered](/en/htb/machines/linux/dificil/altered) | Brute Force / Rate-Limit Bypass · SQL Injection · Type Juggling / Confusion · Remote Code Execution (RCE) | 4 | | [Charon](/en/htb/machines/linux/dificil/charon) | Cracking Hashes (hashcat / John) · SQL Injection · SUID binaries | 3 | | [CrimeStoppers](/en/htb/machines/linux/dificil/crimestoppers) | Local File Inclusion (LFI) · Remote Code Execution (RCE) | 3 | | [Dab](/en/htb/machines/linux/dificil/dab) | Cracking Hashes (hashcat / John) · Server-Side Request Forgery · SUID binaries · Directory fuzzing · Remote Code Execution (RCE) | 3 | | [EarlyAccess](/en/htb/machines/linux/dificil/earlyaccess) | Information Leakage · Port Forwarding / Pivoting · SQL Injection · Local File Inclusion (LFI) · Cross-Site Scripting (XSS) | 3 | | [Ellingson](/en/htb/machines/linux/dificil/ellingson) | Buffer Overflow (BoF / ROP) · SUID binaries · Remote Code Execution (RCE) | 3 | | [Falafel](/en/htb/machines/linux/dificil/falafel) | Information Leakage · SQL Injection · Type Juggling / Confusion · File Upload Vulnerabilities | 3 | | [Feline](/en/htb/machines/linux/dificil/feline) | Information Leakage · Insecure Deserialization · Directory / Path Traversal · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 4 | | [Flujab](/en/htb/machines/linux/dificil/flujab) | SQL Injection · SUID binaries · Remote Code Execution (RCE) | 3 | | [Holiday](/en/htb/machines/linux/dificil/holiday) | SQL Injection · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 | | [Joker](/en/htb/machines/linux/dificil/joker) | Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 | | [Kotarak](/en/htb/machines/linux/dificil/kotarak) | Information Leakage · Port Forwarding / Pivoting · Server-Side Request Forgery | 3 | | [Mischief](/en/htb/machines/linux/dificil/mischief) | Information Leakage · SNMP Enumeration | 4 | | [Monitors](/en/htb/machines/linux/dificil/monitors) | Local File Inclusion (LFI) · Information Leakage · Insecure Deserialization · WordPress Exploitation · Remote Code Execution (RCE) | 4 | | [Oouch](/en/htb/machines/linux/dificil/oouch) | Subdomain Enumeration · Information Leakage · Port Forwarding / Pivoting · OAuth Authentication Vulnerabilities · Remote Code Execution (RCE) | 3 | | [Overflow](/en/htb/machines/linux/dificil/overflow) | Buffer Overflow (BoF / ROP) · SQL Injection · Remote Code Execution (RCE) | 4 | | [OverGraph](/en/htb/machines/linux/dificil/overgraph) | Subdomain Enumeration · Cross-Site Scripting (XSS) · Information Leakage · SQL Injection · File Upload Vulnerabilities · Directory fuzzing · GraphQL Vulnerabilities · Server-Side Request Forgery · SUID binaries · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 | | [Oz](/en/htb/machines/linux/dificil/oz) | SSTI (Server-Side Template Injection) · SQL Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 | | [Phoenix](/en/htb/machines/linux/dificil/phoenix) | Cracking Hashes (hashcat / John) · SQL Injection · File Upload Vulnerabilities · WordPress Exploitation | 3 | | [Player](/en/htb/machines/linux/dificil/player) | Subdomain Enumeration · Information Leakage · OS Command Injection · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 4 | | [Pressed](/en/htb/machines/linux/dificil/pressed) | WordPress Exploitation | 3 | | [Quick](/en/htb/machines/linux/dificil/quick) | Information Leakage · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 4 | | [Scavenger](/en/htb/machines/linux/dificil/scavenger) | DNS zone transfer · SQL Injection | 3 | | [Shrek](/en/htb/machines/linux/dificil/shrek) | Information Leakage · Steganography (Stego) · Port Forwarding / Pivoting | 3 | | [Static](/en/htb/machines/linux/dificil/static) | Port Forwarding / Pivoting · SUID binaries · Remote Code Execution (RCE) | 3 | | [Talkative](/en/htb/machines/linux/dificil/talkative) | Information Leakage · Port Forwarding / Pivoting · Remote Code Execution (RCE) · File Upload Vulnerabilities | 3 | | [Tentacle](/en/htb/machines/linux/dificil/tentacle) | Active Directory | 3 | | [Travel](/en/htb/machines/linux/dificil/travel) | WordPress Exploitation · Insecure Deserialization · Remote Code Execution (RCE) | 3 | | [Unbalanced](/en/htb/machines/linux/dificil/unbalanced) | Information Leakage · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Pi-hole default credentials · Remote Code Execution (RCE) | 3 | | [Unobtainium](/en/htb/machines/linux/dificil/unobtainium) | Local File Inclusion (LFI) · Information Leakage · Prototype Pollution · OS Command Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 | | [Zetta](/en/htb/machines/linux/dificil/zetta) | Information Leakage · SQL Injection · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 |