> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Information Leakage

> Cross-platform resources for Information Leakage: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

# Information Leakage

This page aggregates **cross-platform resources to practice Information Leakage**: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

## Curated resources

| Source     | Link                                                                                                                                         |
| ---------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks | [https://book.hacktricks.wiki/en/pentesting-web/information-leak.html](https://book.hacktricks.wiki/en/pentesting-web/information-leak.html) |

## HTB machines practicing Information Leakage (74)

| Machine                                                     | OS      | Difficulty                                           |
| ----------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [Acute](/en/htb/machines/windows/dificil/acute)             | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Admirer](/en/htb/machines/linux/facil/admirer)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Anubis](/en/htb/machines/windows/insano/anubis)            | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Apocalyst](/en/htb/machines/linux/medio/apocalyst)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Backend](/en/htb/machines/linux/medio/backend)             | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [BackendTwo](/en/htb/machines/linux/medio/backendtwo)       | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Bank](/en/htb/machines/linux/facil/bank)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Bart](/en/htb/machines/windows/medio/bart)                 | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Beep](/en/htb/machines/linux/facil/beep)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Blocky](/en/htb/machines/linux/facil/blocky)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Bolt](/en/htb/machines/linux/medio/bolt)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Brainfuck](/en/htb/machines/linux/insano/brainfuck)        | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Cache](/en/htb/machines/linux/medio/cache)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Catch](/en/htb/machines/linux/medio/catch)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Curling](/en/htb/machines/windows/facil/curling)           | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Delivery](/en/htb/machines/linux/facil/delivery)           | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [DevOops](/en/htb/machines/linux/medio/devoops)             | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [EarlyAccess](/en/htb/machines/linux/dificil/earlyaccess)   | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Falafel](/en/htb/machines/linux/dificil/falafel)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Feline](/en/htb/machines/linux/dificil/feline)             | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Flustered](/en/htb/machines/linux/medio/flustered)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Frolic](/en/htb/machines/linux/facil/frolic)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Fulcrum](/en/htb/machines/linux/insano/fulcrum)            | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Hackback](/en/htb/machines/windows/insano/hackback)        | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Haystack](/en/htb/machines/linux/facil/haystack)           | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Heist](/en/htb/machines/windows/facil/heist)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Horizontall](/en/htb/machines/linux/facil/horizontall)     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Intelligence](/en/htb/machines/windows/medio/intelligence) | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Jerry](/en/htb/machines/windows/facil/jerry)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Jewel](/en/htb/machines/linux/medio/jewel)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Kotarak](/en/htb/machines/linux/dificil/kotarak)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Laboratory](/en/htb/machines/linux/facil/laboratory)       | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Luke](/en/htb/machines/linux/medio/luke)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Mischief](/en/htb/machines/linux/dificil/mischief)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Monitors](/en/htb/machines/linux/dificil/monitors)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [MultiMaster](/en/htb/machines/windows/insano/multimaster)  | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Netmon](/en/htb/machines/windows/facil/netmon)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Node](/en/htb/machines/linux/medio/node)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Noter](/en/htb/machines/linux/medio/noter)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Obscurity](/en/htb/machines/linux/medio/obscurity)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Oouch](/en/htb/machines/linux/dificil/oouch)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [OpenSource](/en/htb/machines/linux/facil/opensource)       | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [OverGraph](/en/htb/machines/linux/dificil/overgraph)       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Pandora](/en/htb/machines/linux/facil/pandora)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Paper](/en/htb/machines/linux/facil/paper)                 | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Pit](/en/htb/machines/linux/medio/pit)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Player](/en/htb/machines/linux/dificil/player)             | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Quick](/en/htb/machines/linux/dificil/quick)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Reel](/en/htb/machines/windows/dificil/reel)               | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Reel2](/en/htb/machines/windows/dificil/reel2)             | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Remote](/en/htb/machines/windows/facil/remote)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Resolute](/en/htb/machines/windows/medio/resolute)         | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Safe](/en/htb/machines/linux/facil/safe)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Sauna](/en/htb/machines/windows/facil/sauna)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Scrambled](/en/htb/machines/windows/medio/scrambled)       | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Seal](/en/htb/machines/linux/medio/seal)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Search](/en/htb/machines/windows/dificil/search)           | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [SecNotes](/en/htb/machines/windows/medio/secnotes)         | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Sense](/en/htb/machines/linux/facil/sense)                 | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Shrek](/en/htb/machines/linux/dificil/shrek)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Sink](/en/htb/machines/linux/insano/sink)                  | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [SneakyMailer](/en/htb/machines/linux/medio/sneakymailer)   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Sniper](/en/htb/machines/windows/medio/sniper)             | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [SolidState](/en/htb/machines/linux/medio/solidstate)       | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [StreamIO](/en/htb/machines/windows/medio/streamio)         | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Talkative](/en/htb/machines/linux/dificil/talkative)       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Tally](/en/htb/machines/windows/dificil/tally)             | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Teacher](/en/htb/machines/linux/facil/teacher)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [TimeLapse](/en/htb/machines/windows/facil/timelapse)       | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Unbalanced](/en/htb/machines/linux/dificil/unbalanced)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Unobtainium](/en/htb/machines/linux/dificil/unobtainium)   | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Validation](/en/htb/machines/linux/facil/validation)       | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Worker](/en/htb/machines/windows/medio/worker)             | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Zetta](/en/htb/machines/linux/dificil/zetta)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |

## PortSwigger labs practicing Information Leakage (6)

| Lab                                                                                                                                                                                                                                         | Difficulty                                                 | Topic                                 | Official                                                                                                                                                                        |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- | ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [Authentication bypass via information disclosure](/en/portswigger/labs/information-disclosure/exploiting-infoleak-authentication-bypass)                                                                                                   | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Information Disclosure                | [Open](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-authentication-bypass)                                                               |
| [Information disclosure in error messages](/en/portswigger/labs/information-disclosure/exploiting-infoleak-in-error-messages)                                                                                                               | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Information Disclosure                | [Open](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-in-error-messages)                                                                   |
| [Information disclosure on debug page](/en/portswigger/labs/information-disclosure/exploiting-infoleak-on-debug-page)                                                                                                                       | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Information Disclosure                | [Open](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-on-debug-page)                                                                       |
| [Source code disclosure via backup files](/en/portswigger/labs/information-disclosure/exploiting-infoleak-via-backup-files)                                                                                                                 | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Information Disclosure                | [Open](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-via-backup-files)                                                                    |
| [Information disclosure in version control history](/en/portswigger/labs/information-disclosure/exploiting-infoleak-in-version-control-history)                                                                                             | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Information Disclosure                | [Open](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-in-version-control-history)                                                          |
| [Server-side template injection with information disclosure via user-supplied objects](/en/portswigger/labs/server-side-template-injection/exploiting-server-side-template-injection-with-information-disclosure-via-user-supplied-objects) | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Server-Side Template Injection (SSTI) | [Open](https://portswigger.net/web-security/server-side-template-injection/exploiting/lab-server-side-template-injection-with-information-disclosure-via-user-supplied-objects) |

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Information Leakage","termCode":"information-leakage","inLanguage":"en","url":"https://rootea.es/en/skills/information-leakage","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"HTB machines practicing Information Leakage","numberOfItems":74,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/en/htb/machines/windows/dificil/acute","name":"Acute"},{"@type":"ListItem","position":2,"url":"https://rootea.es/en/htb/machines/linux/facil/admirer","name":"Admirer"},{"@type":"ListItem","position":3,"url":"https://rootea.es/en/htb/machines/windows/insano/anubis","name":"Anubis"},{"@type":"ListItem","position":4,"url":"https://rootea.es/en/htb/machines/linux/medio/apocalyst","name":"Apocalyst"},{"@type":"ListItem","position":5,"url":"https://rootea.es/en/htb/machines/linux/medio/backend","name":"Backend"},{"@type":"ListItem","position":6,"url":"https://rootea.es/en/htb/machines/linux/medio/backendtwo","name":"BackendTwo"},{"@type":"ListItem","position":7,"url":"https://rootea.es/en/htb/machines/linux/facil/bank","name":"Bank"},{"@type":"ListItem","position":8,"url":"https://rootea.es/en/htb/machines/windows/medio/bart","name":"Bart"},{"@type":"ListItem","position":9,"url":"https://rootea.es/en/htb/machines/linux/facil/beep","name":"Beep"},{"@type":"ListItem","position":10,"url":"https://rootea.es/en/htb/machines/linux/facil/blocky","name":"Blocky"},{"@type":"ListItem","position":11,"url":"https://rootea.es/en/htb/machines/linux/medio/bolt","name":"Bolt"},{"@type":"ListItem","position":12,"url":"https://rootea.es/en/htb/machines/linux/insano/brainfuck","name":"Brainfuck"},{"@type":"ListItem","position":13,"url":"https://rootea.es/en/htb/machines/linux/medio/cache","name":"Cache"},{"@type":"ListItem","position":14,"url":"https://rootea.es/en/htb/machines/linux/medio/catch","name":"Catch"},{"@type":"ListItem","position":15,"url":"https://rootea.es/en/htb/machines/windows/facil/curling","name":"Curling"},{"@type":"ListItem","position":16,"url":"https://rootea.es/en/htb/machines/linux/facil/delivery","name":"Delivery"},{"@type":"ListItem","position":17,"url":"https://rootea.es/en/htb/machines/linux/medio/devoops","name":"DevOops"},{"@type":"ListItem","position":18,"url":"https://rootea.es/en/htb/machines/linux/dificil/earlyaccess","name":"EarlyAccess"},{"@type":"ListItem","position":19,"url":"https://rootea.es/en/htb/machines/linux/dificil/falafel","name":"Falafel"},{"@type":"ListItem","position":20,"url":"https://rootea.es/en/htb/machines/linux/dificil/feline","name":"Feline"},{"@type":"ListItem","position":21,"url":"https://rootea.es/en/htb/machines/linux/medio/flustered","name":"Flustered"},{"@type":"ListItem","position":22,"url":"https://rootea.es/en/htb/machines/linux/facil/frolic","name":"Frolic"},{"@type":"ListItem","position":23,"url":"https://rootea.es/en/htb/machines/linux/insano/fulcrum","name":"Fulcrum"},{"@type":"ListItem","position":24,"url":"https://rootea.es/en/htb/machines/windows/insano/hackback","name":"Hackback"},{"@type":"ListItem","position":25,"url":"https://rootea.es/en/htb/machines/linux/facil/haystack","name":"Haystack"}]}`}
</script>

*Last updated: 2026-05-08*