> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Directory fuzzing

> Cross-platform resources for Directory fuzzing: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

# Directory fuzzing

This page aggregates **cross-platform resources to practice Directory fuzzing**: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

## Curated resources

| Source     | Link                                                                                                                                                                           |
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| HackTricks | [https://book.hacktricks.wiki/en/network-services-pentesting/pentesting-web/index.html](https://book.hacktricks.wiki/en/network-services-pentesting/pentesting-web/index.html) |

## HTB machines practicing Directory fuzzing (13)

| Machine                                                     | OS      | Difficulty                                           |
| ----------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [Bart](/en/htb/machines/windows/medio/bart)                 | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Bounty](/en/htb/machines/windows/facil/bounty)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Dab](/en/htb/machines/linux/dificil/dab)                   | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Devzat](/en/htb/machines/linux/medio/devzat)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [FluxCapacitor](/en/htb/machines/linux/medio/fluxcapacitor) | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Hackback](/en/htb/machines/windows/insano/hackback)        | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Inception](/en/htb/machines/linux/medio/inception)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Noter](/en/htb/machines/linux/medio/noter)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [OverGraph](/en/htb/machines/linux/dificil/overgraph)       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [SecNotes](/en/htb/machines/windows/medio/secnotes)         | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Teacher](/en/htb/machines/linux/facil/teacher)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Wall](/en/htb/machines/linux/medio/wall)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Worker](/en/htb/machines/windows/medio/worker)             | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |

## TryHackMe rooms practicing Directory fuzzing (19)

| Room                                                                | Difficulty                                         | Type        | Access  | Official                                              |
| ------------------------------------------------------------------- | -------------------------------------------------- | ----------- | ------- | ----------------------------------------------------- |
| [25 Days of Cyber Security](/en/tryhackme/rooms/learncyberin25days) | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/learncyberin25days) |
| [Advent of Cyber 1 \[2019\]](/en/tryhackme/rooms/25daysofchristmas) | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/25daysofchristmas)  |
| [Advent of Cyber 2 \[2020\]](/en/tryhackme/rooms/adventofcyber2)    | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/adventofcyber2)     |
| [Advent of Cyber 3 (2021)](/en/tryhackme/rooms/adventofcyber3)      | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/adventofcyber3)     |
| [Basic Pentesting](/en/tryhackme/rooms/basicpentestingjt)           | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/basicpentestingjt)  |
| [Blaster](/en/tryhackme/rooms/blaster)                              | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/blaster)            |
| [Brute It](/en/tryhackme/rooms/bruteit)                             | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/bruteit)            |
| [Easy Peasy](/en/tryhackme/rooms/easypeasyctf)                      | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/easypeasyctf)       |
| [ffuf](/en/tryhackme/rooms/ffuf)                                    | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/ffuf)               |
| [Gobuster: The Basics](/en/tryhackme/rooms/gobusterthebasics)       | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🔵 VIP  | [Open](https://tryhackme.com/room/gobusterthebasics)  |
| [SQLMAP](/en/tryhackme/rooms/sqlmap)                                | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/sqlmap)             |
| [ToolsRus](/en/tryhackme/rooms/toolsrus)                            | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🔵 VIP  | [Open](https://tryhackme.com/room/toolsrus)           |
| [Vulnversity](/en/tryhackme/rooms/vulnversity)                      | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/vulnversity)        |
| [Web Enumeration](/en/tryhackme/rooms/webenumerationv2)             | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🔵 VIP  | [Open](https://tryhackme.com/room/webenumerationv2)   |
| [Bookstore](/en/tryhackme/rooms/bookstoreoc)                        | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/bookstoreoc)        |
| [CMesS](/en/tryhackme/rooms/cmess)                                  | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/cmess)              |
| [Crack The Hash Level 2](/en/tryhackme/rooms/crackthehashlevel2)    | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/crackthehashlevel2) |
| [HA Joker CTF](/en/tryhackme/rooms/jokerctf)                        | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/jokerctf)           |
| [Retro](/en/tryhackme/rooms/retro)                                  | <span className="dbadge dbadge-easy">HARD</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/retro)              |

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Directory fuzzing","termCode":"fuzzing","inLanguage":"en","url":"https://rootea.es/en/skills/fuzzing","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"HTB machines practicing Directory fuzzing","numberOfItems":13,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/en/htb/machines/windows/medio/bart","name":"Bart"},{"@type":"ListItem","position":2,"url":"https://rootea.es/en/htb/machines/windows/facil/bounty","name":"Bounty"},{"@type":"ListItem","position":3,"url":"https://rootea.es/en/htb/machines/linux/dificil/dab","name":"Dab"},{"@type":"ListItem","position":4,"url":"https://rootea.es/en/htb/machines/linux/medio/devzat","name":"Devzat"},{"@type":"ListItem","position":5,"url":"https://rootea.es/en/htb/machines/linux/medio/fluxcapacitor","name":"FluxCapacitor"},{"@type":"ListItem","position":6,"url":"https://rootea.es/en/htb/machines/windows/insano/hackback","name":"Hackback"},{"@type":"ListItem","position":7,"url":"https://rootea.es/en/htb/machines/linux/medio/inception","name":"Inception"},{"@type":"ListItem","position":8,"url":"https://rootea.es/en/htb/machines/linux/medio/noter","name":"Noter"},{"@type":"ListItem","position":9,"url":"https://rootea.es/en/htb/machines/linux/dificil/overgraph","name":"OverGraph"},{"@type":"ListItem","position":10,"url":"https://rootea.es/en/htb/machines/windows/medio/secnotes","name":"SecNotes"},{"@type":"ListItem","position":11,"url":"https://rootea.es/en/htb/machines/linux/facil/teacher","name":"Teacher"},{"@type":"ListItem","position":12,"url":"https://rootea.es/en/htb/machines/linux/medio/wall","name":"Wall"},{"@type":"ListItem","position":13,"url":"https://rootea.es/en/htb/machines/windows/medio/worker","name":"Worker"}]}`}
</script>

*Last updated: 2026-05-09*