> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Brute Force / Rate-Limit Bypass

> Cross-platform resources for Brute Force / Rate-Limit Bypass: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

# Brute Force / Rate-Limit Bypass

This page aggregates **cross-platform resources to practice Brute Force / Rate-Limit Bypass**: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

## Curated resources

| Source     | Link                                                                                                                                                                         |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks | [https://book.hacktricks.wiki/en/generic-methodologies-and-resources/brute-force.html](https://book.hacktricks.wiki/en/generic-methodologies-and-resources/brute-force.html) |

## HTB machines practicing Brute Force / Rate-Limit Bypass (12)

| Machine                                                    | OS      | Difficulty                                           |
| ---------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [Altered](/en/htb/machines/linux/dificil/altered)          | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Bankrobber](/en/htb/machines/windows/insano/bankrobber)   | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [CTF](/en/htb/machines/linux/insano/ctf)                   | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Fulcrum](/en/htb/machines/linux/insano/fulcrum)           | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Hawk](/en/htb/machines/linux/medio/hawk)                  | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Monteverde](/en/htb/machines/windows/medio/monteverde)    | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [MultiMaster](/en/htb/machines/windows/insano/multimaster) | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Nineveh](/en/htb/machines/linux/medio/nineveh)            | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Quick](/en/htb/machines/linux/dificil/quick)              | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Reel2](/en/htb/machines/windows/dificil/reel2)            | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Wall](/en/htb/machines/linux/medio/wall)                  | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Zetta](/en/htb/machines/linux/dificil/zetta)              | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |

## PortSwigger labs practicing Brute Force / Rate-Limit Bypass (1)

| Lab                                                                                                             | Difficulty                                                 | Topic   | Official                                                                                       |
| --------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- | ------- | ---------------------------------------------------------------------------------------------- |
| [Bypassing GraphQL brute force protections](/en/portswigger/labs/graphql/graphql-brute-force-protection-bypass) | <span className="dbadge dbadge-medium">PRACTITIONER</span> | GraphQL | [Open](https://portswigger.net/web-security/graphql/lab-graphql-brute-force-protection-bypass) |

## TryHackMe rooms practicing Brute Force / Rate-Limit Bypass (8)

| Room                                                                      | Difficulty                                         | Type        | Access  | Official                                                   |
| ------------------------------------------------------------------------- | -------------------------------------------------- | ----------- | ------- | ---------------------------------------------------------- |
| [Enumeration & Brute Force](/en/tryhackme/rooms/enumerationbruteforce)    | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/enumerationbruteforce)   |
| [Fowsniff CTF](/en/tryhackme/rooms/ctf)                                   | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/ctf)                     |
| [h4cked](/en/tryhackme/rooms/h4cked)                                      | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/h4cked)                  |
| [MS Sentinel: Just Looking](/en/tryhackme/rooms/justlooking)              | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🔵 VIP  | [Open](https://tryhackme.com/room/justlooking)             |
| [Windows Logging for SOC](/en/tryhackme/rooms/windowsloggingforsoc)       | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/windowsloggingforsoc)    |
| [Entra ID Monitoring](/en/tryhackme/rooms/entraidmonitoring)              | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/entraidmonitoring)       |
| [HA Joker CTF](/en/tryhackme/rooms/jokerctf)                              | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/jokerctf)                |
| [Windows Threat Detection 1](/en/tryhackme/rooms/windowsthreatdetection1) | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/windowsthreatdetection1) |

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Brute Force / Rate-Limit Bypass","termCode":"brute-force","inLanguage":"en","url":"https://rootea.es/en/skills/brute-force","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"HTB machines practicing Brute Force / Rate-Limit Bypass","numberOfItems":12,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/en/htb/machines/linux/dificil/altered","name":"Altered"},{"@type":"ListItem","position":2,"url":"https://rootea.es/en/htb/machines/windows/insano/bankrobber","name":"Bankrobber"},{"@type":"ListItem","position":3,"url":"https://rootea.es/en/htb/machines/linux/insano/ctf","name":"CTF"},{"@type":"ListItem","position":4,"url":"https://rootea.es/en/htb/machines/linux/insano/fulcrum","name":"Fulcrum"},{"@type":"ListItem","position":5,"url":"https://rootea.es/en/htb/machines/linux/medio/hawk","name":"Hawk"},{"@type":"ListItem","position":6,"url":"https://rootea.es/en/htb/machines/windows/medio/monteverde","name":"Monteverde"},{"@type":"ListItem","position":7,"url":"https://rootea.es/en/htb/machines/windows/insano/multimaster","name":"MultiMaster"},{"@type":"ListItem","position":8,"url":"https://rootea.es/en/htb/machines/linux/medio/nineveh","name":"Nineveh"},{"@type":"ListItem","position":9,"url":"https://rootea.es/en/htb/machines/linux/dificil/quick","name":"Quick"},{"@type":"ListItem","position":10,"url":"https://rootea.es/en/htb/machines/windows/dificil/reel2","name":"Reel2"},{"@type":"ListItem","position":11,"url":"https://rootea.es/en/htb/machines/linux/medio/wall","name":"Wall"},{"@type":"ListItem","position":12,"url":"https://rootea.es/en/htb/machines/linux/dificil/zetta","name":"Zetta"}]}`}
</script>

*Last updated: 2026-05-09*