> ## Documentation Index > Fetch the complete documentation index at: https://rootea.es/llms.txt > Use this file to discover all available pages before exploring further. # Linux · Medium > Linux machines with Medium difficulty # Linux · Medium 56 machines in this category. | Machine | Skills | Writeups | | ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------: | | [Apocalyst](/en/htb/machines/linux/medio/apocalyst) | WordPress Exploitation · Information Leakage · Steganography (Stego) · Remote Code Execution (RCE) | 3 | | [Aragog](/en/htb/machines/linux/medio/aragog) | XML External Entity · WordPress Exploitation | 3 | | [Backend](/en/htb/machines/linux/medio/backend) | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 4 | | [BackendTwo](/en/htb/machines/linux/medio/backendtwo) | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 | | [Bolt](/en/htb/machines/linux/medio/bolt) | SSTI (Server-Side Template Injection) · Subdomain Enumeration · Information Leakage | 3 | | [Book](/en/htb/machines/linux/medio/book) | Cross-Site Scripting (XSS) | 3 | | [Cache](/en/htb/machines/linux/medio/cache) | Access Control / IDOR · Authentication Vulnerabilities · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 | | [Catch](/en/htb/machines/linux/medio/catch) | SSTI (Server-Side Template Injection) · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 | | [Celestial](/en/htb/machines/linux/medio/celestial) | Insecure Deserialization · Remote Code Execution (RCE) | 3 | | [Chaos](/en/htb/machines/linux/medio/chaos) | Remote Code Execution (RCE) | 3 | | [Cronos](/en/htb/machines/linux/medio/cronos) | OS Command Injection · DNS zone transfer · SQL Injection | 3 | | [DevOops](/en/htb/machines/linux/medio/devoops) | XML External Entity · Information Leakage | 4 | | [Devzat](/en/htb/machines/linux/medio/devzat) | Directory fuzzing · Remote Code Execution (RCE) | 3 | | [Enterprise](/en/htb/machines/linux/medio/enterprise) | WordPress Exploitation · Buffer Overflow (BoF / ROP) · SQL Injection | 3 | | [Epsilon](/en/htb/machines/linux/medio/epsilon) | SSTI (Server-Side Template Injection) · Authentication Vulnerabilities · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 | | [Europa](/en/htb/machines/linux/medio/europa) | SQL Injection · Remote Code Execution (RCE) | 4 | | [Flustered](/en/htb/machines/linux/medio/flustered) | SSTI (Server-Side Template Injection) · Information Leakage · Remote Code Execution (RCE) | 3 | | [FluxCapacitor](/en/htb/machines/linux/medio/fluxcapacitor) | OS Command Injection · Directory fuzzing | 3 | | [Forge](/en/htb/machines/linux/medio/forge) | Server-Side Request Forgery | 3 | | [Haircut](/en/htb/machines/linux/medio/haircut) | OS Command Injection · Server-Side Request Forgery | 4 | | [Hawk](/en/htb/machines/linux/medio/hawk) | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 | | [Inception](/en/htb/machines/linux/medio/inception) | Local File Inclusion (LFI) · Port Forwarding / Pivoting · WebDAV · Directory fuzzing | 3 | | [Jewel](/en/htb/machines/linux/medio/jewel) | Information Leakage · Cracking Hashes (hashcat / John) · Insecure Deserialization · Remote Code Execution (RCE) | 3 | | [Lazy](/en/htb/machines/linux/medio/lazy) | SUID binaries | 3 | | [Luke](/en/htb/machines/linux/medio/luke) | Information Leakage | 3 | | [Mango](/en/htb/machines/linux/medio/mango) | SQL Injection · SUID binaries | 3 | | [Meta](/en/htb/machines/linux/medio/meta) | Subdomain Enumeration · File Upload Vulnerabilities · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 4 | | [Nineveh](/en/htb/machines/linux/medio/nineveh) | Remote Code Execution (RCE) · Local File Inclusion (LFI) · Steganography (Stego) · Brute Force / Rate-Limit Bypass | 3 | | [Node](/en/htb/machines/linux/medio/node) | Information Leakage · OS Command Injection · Cracking Hashes (hashcat / John) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting · SUID binaries | 4 | | [Noter](/en/htb/machines/linux/medio/noter) | SSTI (Server-Side Template Injection) · Information Leakage · OS Command Injection · Directory fuzzing · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 5 | | [Obscurity](/en/htb/machines/linux/medio/obscurity) | Information Leakage · OS Command Injection · Race Conditions · Remote Code Execution (RCE) | 4 | | [October](/en/htb/machines/linux/medio/october) | Buffer Overflow (BoF / ROP) | 3 | | [Passage](/en/htb/machines/linux/medio/passage) | CuteNews Exploitation Code Analysis USBCreator D-Bus Privilege Escalation… | 3 | | [Pit](/en/htb/machines/linux/medio/pit) | Information Leakage · SNMP Enumeration · Remote Code Execution (RCE) | 3 | | [Poison](/en/htb/machines/linux/medio/poison) | Local File Inclusion (LFI) · Remote Code Execution (RCE) | 4 | | [Ransom](/en/htb/machines/linux/medio/ransom) | Type Juggling / Confusion | 3 | | [RedCross](/en/htb/machines/linux/medio/redcross) | Subdomain Enumeration · Buffer Overflow (BoF / ROP) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 | | [Retired](/en/htb/machines/linux/medio/retired) | Local File Inclusion (LFI) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting | 4 | | [Schooled](/en/htb/machines/linux/medio/schooled) | Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 | | [Seal](/en/htb/machines/linux/medio/seal) | Information Leakage · Remote Code Execution (RCE) | 3 | | [Shibboleth](/en/htb/machines/linux/medio/shibboleth) | Remote Code Execution (RCE) | 3 | | [SneakyMailer](/en/htb/machines/linux/medio/sneakymailer) | Information Leakage | 3 | | [SolidState](/en/htb/machines/linux/medio/solidstate) | Information Leakage · Cron abuse | 3 | | [Stratosphere](/en/htb/machines/linux/medio/stratosphere) | Apache Struts Exploitation (CVE-2017-5638) Python Library Hijacking (Privilege… | 3 | | [TartarSauce](/en/htb/machines/linux/medio/tartarsauce) | Remote File Inclusion (RFI) · WordPress Exploitation · Remote Code Execution (RCE) | 4 | | [Tenet](/en/htb/machines/linux/medio/tenet) | Insecure Deserialization · Race Conditions | 3 | | [Tenten](/en/htb/machines/linux/medio/tenten) | WordPress Exploitation · Cracking Hashes (hashcat / John) · Steganography (Stego) | 3 | | [TheNotebook](/en/htb/machines/linux/medio/thenotebook) | File Upload Vulnerabilities · JSON Web Tokens (JWT) | 3 | | [Time](/en/htb/machines/linux/medio/time) | Server-Side Request Forgery · Remote Code Execution (RCE) | 4 | | [Timing](/en/htb/machines/linux/medio/timing) | Local File Inclusion (LFI) · File Upload Vulnerabilities | 4 | | [Undetected](/en/htb/machines/linux/medio/undetected) | Subdomain Enumeration · Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) | 3 | | [Unicode](/en/htb/machines/linux/medio/unicode) | Local File Inclusion (LFI) · JSON Web Tokens (JWT) | 3 | | [Union](/en/htb/machines/linux/medio/union) | OS Command Injection · SQL Injection · Remote Code Execution (RCE) | 4 | | [Waldo](/en/htb/machines/linux/medio/waldo) | Local File Inclusion (LFI) | 3 | | [Wall](/en/htb/machines/linux/medio/wall) | Brute Force / Rate-Limit Bypass · SUID binaries · Directory fuzzing · Remote Code Execution (RCE) | 3 | | [Writer](/en/htb/machines/linux/medio/writer) | OS Command Injection · Cracking Hashes (hashcat / John) · SQL Injection · Port Forwarding / Pivoting | 4 |