> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.
# Todas las máquinas
> Tabla maestra del catálogo completo de máquinas retiradas
# Todas las máquinas
Catálogo completo: **203 máquinas retiradas** con 683 writeups validados. Cmd+K / Ctrl+K.
OS
Linux
Windows
Dificultad
FÁCIL
MEDIO
DIFÍCIL
INSANO
Vector
Active Directory
Web
Binary
Crypto
Forensics
Linux privesc
Windows privesc
## Linux (140)
| Máquina | Dificultad | Skills | Writeups |
| ---------------------------------------------------------- | ---------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------: |
| [Admirer](/htb/machines/linux/facil/admirer) | EASY | Information Leakage | 3 |
| [Antique](/htb/machines/linux/facil/antique) | EASY | SNMP Enumeration | 4 |
| [Backdoor](/htb/machines/linux/facil/backdoor) | EASY | Local File Inclusion (LFI) · WordPress Exploitation · Remote Code Execution (RCE) | 4 |
| [Bank](/htb/machines/linux/facil/bank) | EASY | Information Leakage · Transferencia de zona DNS · File Upload Vulnerabilities · SUID binaries · Remote Code Execution (RCE) | 4 |
| [Bashed](/htb/machines/linux/facil/bashed) | EASY | Abuso de cron · Abuso de sudo · phpbash (web shell PHP) | 2 |
| [Beep](/htb/machines/linux/facil/beep) | EASY | Local File Inclusion (LFI) · Information Leakage · File Upload Vulnerabilities · Shellshock (CVE-2014-6271) · Elastix LFI · Remote Code Execution (RCE) | 3 |
| [Blocky](/htb/machines/linux/facil/blocky) | EASY | WordPress Exploitation · Information Leakage | 3 |
| [Blunder](/htb/machines/linux/facil/blunder) | EASY | Directory / Path Traversal · File Upload Vulnerabilities | 3 |
| [BountyHunter](/htb/machines/linux/facil/bountyhunter) | EASY | XML External Entity | 4 |
| [Delivery](/htb/machines/linux/facil/delivery) | EASY | Subdomain Enumeration · Information Leakage · Cracking Hashes (hashcat / John) | 4 |
| [Doctor](/htb/machines/linux/facil/doctor) | EASY | SSTI (Server-Side Template Injection) · OS Command Injection · Remote Code Execution (RCE) | 3 |
| [Frolic](/htb/machines/linux/facil/frolic) | EASY | Remote Code Execution (RCE) · Information Leakage | 4 |
| [GoodGames](/htb/machines/linux/facil/goodgames) | EASY | SSTI (Server-Side Template Injection) · Port Forwarding / Pivoting · SQL Injection | 4 |
| [Haystack](/htb/machines/linux/facil/haystack) | EASY | Information Leakage | 3 |
| [Horizontall](/htb/machines/linux/facil/horizontall) | EASY | Information Leakage · Port Forwarding / Pivoting | 3 |
| [Knife](/htb/machines/linux/facil/knife) | EASY | Remote Code Execution (RCE) | 3 |
| [Laboratory](/htb/machines/linux/facil/laboratory) | EASY | Information Leakage · Insecure Deserialization · SUID binaries · Remote Code Execution (RCE) | 3 |
| [Lame](/htb/machines/linux/facil/lame) | EASY | Samba 3.0.20 RCE (CVE-2007-2447) | 5 |
| [Late](/htb/machines/linux/facil/late) | EASY | SSTI (Server-Side Template Injection) · Subdomain Enumeration · File Upload Vulnerabilities | 4 |
| [Mirai](/htb/machines/linux/facil/mirai) | EASY | Credenciales por defecto · USB forensics · Pi-hole credenciales por defecto | 3 |
| [Nibbles](/htb/machines/linux/facil/nibbles) | EASY | Remote Code Execution (RCE) · File Upload Vulnerabilities | 4 |
| [NodeBlog](/htb/machines/linux/facil/nodeblog) | EASY | Authentication Vulnerabilities · Insecure Deserialization · SQL Injection · XML External Entity | 3 |
| [NunChucks](/htb/machines/linux/facil/nunchucks) | EASY | SSTI (Server-Side Template Injection) | 4 |
| [OpenSource](/htb/machines/linux/facil/opensource) | EASY | Local File Inclusion (LFI) · Information Leakage · Port Forwarding / Pivoting · File Upload Vulnerabilities · Remote Code Execution (RCE) | 3 |
| [Pandora](/htb/machines/linux/facil/pandora) | EASY | Remote Code Execution (RCE) · Information Leakage · Port Forwarding / Pivoting · SQL Injection · SNMP Enumeration | 3 |
| [Paper](/htb/machines/linux/facil/paper) | EASY | Information Leakage · WordPress Exploitation | 4 |
| [Postman](/htb/machines/linux/facil/postman) | EASY | Redis Exploitation | 4 |
| [RouterSpace](/htb/machines/linux/facil/routerspace) | EASY | OS Command Injection · linPEAS · Remote Code Execution (RCE) | 3 |
| [Safe](/htb/machines/linux/facil/safe) | EASY | Information Leakage · Buffer Overflow (BoF / ROP) | 3 |
| [ScriptKiddie](/htb/machines/linux/facil/scriptkiddie) | EASY | OS Command Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 |
| [Secret](/htb/machines/linux/facil/secret) | EASY | JSON Web Tokens (JWT) | 4 |
| [Sense](/htb/machines/linux/facil/sense) | EASY | Information Leakage · pfSense · Remote Code Execution (RCE) | 3 |
| [Shocker](/htb/machines/linux/facil/shocker) | EASY | Shellshock (CVE-2014-6271) | 4 |
| [SteamCloud](/htb/machines/linux/facil/steamcloud) | EASY | Kubernetes API Enumeration (kubectl) Kubelet API Enumeration (kubeletctl)… | 3 |
| [SwagShop](/htb/machines/linux/facil/swagshop) | EASY | Remote Code Execution (RCE) | 3 |
| [Tabby](/htb/machines/linux/facil/tabby) | EASY | Local File Inclusion (LFI) | 3 |
| [Teacher](/htb/machines/linux/facil/teacher) | EASY | Information Leakage · Cracking Hashes (hashcat / John) · Fuzzing de directorios · Remote Code Execution (RCE) | 4 |
| [Traverxec](/htb/machines/linux/facil/traverxec) | EASY | Nostromo Exploitation Abusing Nostromo HomeDirs Configuration Exploiting… | 4 |
| [Valentine](/htb/machines/linux/facil/valentine) | EASY | Cracking Hashes (hashcat / John) · Race Conditions | 3 |
| [Validation](/htb/machines/linux/facil/validation) | EASY | Information Leakage · SQL Injection · Remote Code Execution (RCE) | 4 |
| [Apocalyst](/htb/machines/linux/medio/apocalyst) | MEDIUM | WordPress Exploitation · Information Leakage · Steganography (Stego) · Remote Code Execution (RCE) | 3 |
| [Aragog](/htb/machines/linux/medio/aragog) | MEDIUM | XML External Entity · WordPress Exploitation | 3 |
| [Backend](/htb/machines/linux/medio/backend) | MEDIUM | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 4 |
| [BackendTwo](/htb/machines/linux/medio/backendtwo) | MEDIUM | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 |
| [Bolt](/htb/machines/linux/medio/bolt) | MEDIUM | SSTI (Server-Side Template Injection) · Subdomain Enumeration · Information Leakage | 3 |
| [Book](/htb/machines/linux/medio/book) | MEDIUM | Cross-Site Scripting (XSS) | 3 |
| [Cache](/htb/machines/linux/medio/cache) | MEDIUM | Access Control / IDOR · Authentication Vulnerabilities · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 |
| [Catch](/htb/machines/linux/medio/catch) | MEDIUM | SSTI (Server-Side Template Injection) · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 |
| [Celestial](/htb/machines/linux/medio/celestial) | MEDIUM | Insecure Deserialization · Remote Code Execution (RCE) | 3 |
| [Chaos](/htb/machines/linux/medio/chaos) | MEDIUM | Remote Code Execution (RCE) | 3 |
| [Cronos](/htb/machines/linux/medio/cronos) | MEDIUM | OS Command Injection · Transferencia de zona DNS · SQL Injection | 3 |
| [DevOops](/htb/machines/linux/medio/devoops) | MEDIUM | XML External Entity · Information Leakage | 4 |
| [Devzat](/htb/machines/linux/medio/devzat) | MEDIUM | Fuzzing de directorios · Remote Code Execution (RCE) | 3 |
| [Enterprise](/htb/machines/linux/medio/enterprise) | MEDIUM | WordPress Exploitation · Buffer Overflow (BoF / ROP) · SQL Injection | 3 |
| [Epsilon](/htb/machines/linux/medio/epsilon) | MEDIUM | SSTI (Server-Side Template Injection) · Authentication Vulnerabilities · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 |
| [Europa](/htb/machines/linux/medio/europa) | MEDIUM | SQL Injection · Remote Code Execution (RCE) | 4 |
| [Flustered](/htb/machines/linux/medio/flustered) | MEDIUM | SSTI (Server-Side Template Injection) · Information Leakage · Remote Code Execution (RCE) | 3 |
| [FluxCapacitor](/htb/machines/linux/medio/fluxcapacitor) | MEDIUM | OS Command Injection · Fuzzing de directorios | 3 |
| [Forge](/htb/machines/linux/medio/forge) | MEDIUM | Server-Side Request Forgery | 3 |
| [Haircut](/htb/machines/linux/medio/haircut) | MEDIUM | OS Command Injection · Server-Side Request Forgery | 4 |
| [Hawk](/htb/machines/linux/medio/hawk) | MEDIUM | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 |
| [Inception](/htb/machines/linux/medio/inception) | MEDIUM | Local File Inclusion (LFI) · Port Forwarding / Pivoting · WebDAV · Fuzzing de directorios | 3 |
| [Jewel](/htb/machines/linux/medio/jewel) | MEDIUM | Information Leakage · Cracking Hashes (hashcat / John) · Insecure Deserialization · Remote Code Execution (RCE) | 3 |
| [Lazy](/htb/machines/linux/medio/lazy) | MEDIUM | SUID binaries | 3 |
| [Luke](/htb/machines/linux/medio/luke) | MEDIUM | Information Leakage | 3 |
| [Mango](/htb/machines/linux/medio/mango) | MEDIUM | SQL Injection · SUID binaries | 3 |
| [Meta](/htb/machines/linux/medio/meta) | MEDIUM | Subdomain Enumeration · File Upload Vulnerabilities · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 4 |
| [Nineveh](/htb/machines/linux/medio/nineveh) | MEDIUM | Remote Code Execution (RCE) · Local File Inclusion (LFI) · Steganography (Stego) · Brute Force / Rate-Limit Bypass | 3 |
| [Node](/htb/machines/linux/medio/node) | MEDIUM | Information Leakage · OS Command Injection · Cracking Hashes (hashcat / John) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting · SUID binaries | 4 |
| [Noter](/htb/machines/linux/medio/noter) | MEDIUM | SSTI (Server-Side Template Injection) · Information Leakage · OS Command Injection · Fuzzing de directorios · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 5 |
| [Obscurity](/htb/machines/linux/medio/obscurity) | MEDIUM | Information Leakage · OS Command Injection · Race Conditions · Remote Code Execution (RCE) | 4 |
| [October](/htb/machines/linux/medio/october) | MEDIUM | Buffer Overflow (BoF / ROP) | 3 |
| [Passage](/htb/machines/linux/medio/passage) | MEDIUM | CuteNews Exploitation Code Analysis USBCreator D-Bus Privilege Escalation… | 3 |
| [Pit](/htb/machines/linux/medio/pit) | MEDIUM | Information Leakage · SNMP Enumeration · Remote Code Execution (RCE) | 3 |
| [Poison](/htb/machines/linux/medio/poison) | MEDIUM | Local File Inclusion (LFI) · Remote Code Execution (RCE) | 4 |
| [Ransom](/htb/machines/linux/medio/ransom) | MEDIUM | Type Juggling / Confusion | 3 |
| [RedCross](/htb/machines/linux/medio/redcross) | MEDIUM | Subdomain Enumeration · Buffer Overflow (BoF / ROP) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [Retired](/htb/machines/linux/medio/retired) | MEDIUM | Local File Inclusion (LFI) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting | 4 |
| [Schooled](/htb/machines/linux/medio/schooled) | MEDIUM | Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [Seal](/htb/machines/linux/medio/seal) | MEDIUM | Information Leakage · Remote Code Execution (RCE) | 3 |
| [Shibboleth](/htb/machines/linux/medio/shibboleth) | MEDIUM | Remote Code Execution (RCE) | 3 |
| [SneakyMailer](/htb/machines/linux/medio/sneakymailer) | MEDIUM | Information Leakage | 3 |
| [SolidState](/htb/machines/linux/medio/solidstate) | MEDIUM | Information Leakage · Abuso de cron | 3 |
| [Stratosphere](/htb/machines/linux/medio/stratosphere) | MEDIUM | Apache Struts Exploitation (CVE-2017-5638) Python Library Hijacking (Privilege… | 3 |
| [TartarSauce](/htb/machines/linux/medio/tartarsauce) | MEDIUM | Remote File Inclusion (RFI) · WordPress Exploitation · Remote Code Execution (RCE) | 4 |
| [Tenet](/htb/machines/linux/medio/tenet) | MEDIUM | Insecure Deserialization · Race Conditions | 3 |
| [Tenten](/htb/machines/linux/medio/tenten) | MEDIUM | WordPress Exploitation · Cracking Hashes (hashcat / John) · Steganography (Stego) | 3 |
| [TheNotebook](/htb/machines/linux/medio/thenotebook) | MEDIUM | File Upload Vulnerabilities · JSON Web Tokens (JWT) | 3 |
| [Time](/htb/machines/linux/medio/time) | MEDIUM | Server-Side Request Forgery · Remote Code Execution (RCE) | 4 |
| [Timing](/htb/machines/linux/medio/timing) | MEDIUM | Local File Inclusion (LFI) · File Upload Vulnerabilities | 4 |
| [Undetected](/htb/machines/linux/medio/undetected) | MEDIUM | Subdomain Enumeration · Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) | 3 |
| [Unicode](/htb/machines/linux/medio/unicode) | MEDIUM | Local File Inclusion (LFI) · JSON Web Tokens (JWT) | 3 |
| [Union](/htb/machines/linux/medio/union) | MEDIUM | OS Command Injection · SQL Injection · Remote Code Execution (RCE) | 4 |
| [Waldo](/htb/machines/linux/medio/waldo) | MEDIUM | Local File Inclusion (LFI) | 3 |
| [Wall](/htb/machines/linux/medio/wall) | MEDIUM | Brute Force / Rate-Limit Bypass · SUID binaries · Fuzzing de directorios · Remote Code Execution (RCE) | 3 |
| [Writer](/htb/machines/linux/medio/writer) | MEDIUM | OS Command Injection · Cracking Hashes (hashcat / John) · SQL Injection · Port Forwarding / Pivoting | 4 |
| [AdmirerToo](/htb/machines/linux/dificil/admirertoo) | HARD | Remote Code Execution (RCE) · Subdomain Enumeration · Server-Side Request Forgery | 3 |
| [Altered](/htb/machines/linux/dificil/altered) | HARD | Brute Force / Rate-Limit Bypass · SQL Injection · Type Juggling / Confusion · Remote Code Execution (RCE) | 4 |
| [Charon](/htb/machines/linux/dificil/charon) | HARD | Cracking Hashes (hashcat / John) · SQL Injection · SUID binaries | 3 |
| [CrimeStoppers](/htb/machines/linux/dificil/crimestoppers) | HARD | Local File Inclusion (LFI) · Remote Code Execution (RCE) | 3 |
| [Dab](/htb/machines/linux/dificil/dab) | HARD | Cracking Hashes (hashcat / John) · Server-Side Request Forgery · SUID binaries · Fuzzing de directorios · Remote Code Execution (RCE) | 3 |
| [EarlyAccess](/htb/machines/linux/dificil/earlyaccess) | HARD | Information Leakage · Port Forwarding / Pivoting · SQL Injection · Local File Inclusion (LFI) · Cross-Site Scripting (XSS) | 3 |
| [Ellingson](/htb/machines/linux/dificil/ellingson) | HARD | Buffer Overflow (BoF / ROP) · SUID binaries · Remote Code Execution (RCE) | 3 |
| [Falafel](/htb/machines/linux/dificil/falafel) | HARD | Information Leakage · SQL Injection · Type Juggling / Confusion · File Upload Vulnerabilities | 3 |
| [Feline](/htb/machines/linux/dificil/feline) | HARD | Information Leakage · Insecure Deserialization · Directory / Path Traversal · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 4 |
| [Flujab](/htb/machines/linux/dificil/flujab) | HARD | SQL Injection · SUID binaries · Remote Code Execution (RCE) | 3 |
| [Holiday](/htb/machines/linux/dificil/holiday) | HARD | SQL Injection · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [Joker](/htb/machines/linux/dificil/joker) | HARD | Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 |
| [Kotarak](/htb/machines/linux/dificil/kotarak) | HARD | Information Leakage · Port Forwarding / Pivoting · Server-Side Request Forgery | 3 |
| [Mischief](/htb/machines/linux/dificil/mischief) | HARD | Information Leakage · SNMP Enumeration | 4 |
| [Monitors](/htb/machines/linux/dificil/monitors) | HARD | Local File Inclusion (LFI) · Information Leakage · Insecure Deserialization · WordPress Exploitation · Remote Code Execution (RCE) | 4 |
| [Oouch](/htb/machines/linux/dificil/oouch) | HARD | Subdomain Enumeration · Information Leakage · Port Forwarding / Pivoting · OAuth Authentication Vulnerabilities · Remote Code Execution (RCE) | 3 |
| [Overflow](/htb/machines/linux/dificil/overflow) | HARD | Buffer Overflow (BoF / ROP) · SQL Injection · Remote Code Execution (RCE) | 4 |
| [OverGraph](/htb/machines/linux/dificil/overgraph) | HARD | Subdomain Enumeration · Cross-Site Scripting (XSS) · Information Leakage · SQL Injection · File Upload Vulnerabilities · Fuzzing de directorios · GraphQL Vulnerabilities · Server-Side Request Forgery · SUID binaries · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 |
| [Oz](/htb/machines/linux/dificil/oz) | HARD | SSTI (Server-Side Template Injection) · SQL Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 |
| [Phoenix](/htb/machines/linux/dificil/phoenix) | HARD | Cracking Hashes (hashcat / John) · SQL Injection · File Upload Vulnerabilities · WordPress Exploitation | 3 |
| [Player](/htb/machines/linux/dificil/player) | HARD | Subdomain Enumeration · Information Leakage · OS Command Injection · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 4 |
| [Pressed](/htb/machines/linux/dificil/pressed) | HARD | WordPress Exploitation | 3 |
| [Quick](/htb/machines/linux/dificil/quick) | HARD | Information Leakage · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 4 |
| [Scavenger](/htb/machines/linux/dificil/scavenger) | HARD | Transferencia de zona DNS · SQL Injection | 3 |
| [Shrek](/htb/machines/linux/dificil/shrek) | HARD | Information Leakage · Steganography (Stego) · Port Forwarding / Pivoting | 3 |
| [Static](/htb/machines/linux/dificil/static) | HARD | Port Forwarding / Pivoting · SUID binaries · Remote Code Execution (RCE) | 3 |
| [Talkative](/htb/machines/linux/dificil/talkative) | HARD | Information Leakage · Port Forwarding / Pivoting · Remote Code Execution (RCE) · File Upload Vulnerabilities | 3 |
| [Tentacle](/htb/machines/linux/dificil/tentacle) | HARD | Active Directory | 3 |
| [Travel](/htb/machines/linux/dificil/travel) | HARD | WordPress Exploitation · Insecure Deserialization · Remote Code Execution (RCE) | 3 |
| [Unbalanced](/htb/machines/linux/dificil/unbalanced) | HARD | Information Leakage · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Pi-hole credenciales por defecto · Remote Code Execution (RCE) | 3 |
| [Unobtainium](/htb/machines/linux/dificil/unobtainium) | HARD | Local File Inclusion (LFI) · Information Leakage · Prototype Pollution · OS Command Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 |
| [Zetta](/htb/machines/linux/dificil/zetta) | HARD | Information Leakage · SQL Injection · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 |
| [Ariekei](/htb/machines/linux/insano/ariekei) | INSANE | Shellshock (CVE-2014-6271) · Port Forwarding / Pivoting | 3 |
| [Brainfuck](/htb/machines/linux/insano/brainfuck) | INSANE | WordPress Exploitation · Information Leakage | 4 |
| [CrossFit](/htb/machines/linux/insano/crossfit) | INSANE | Subdomain Enumeration · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · CSRF (Cross-Site Request Forgery) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [CTF](/htb/machines/linux/insano/ctf) | INSANE | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 4 |
| [Fortune](/htb/machines/linux/insano/fortune) | INSANE | OS Command Injection | 3 |
| [Fulcrum](/htb/machines/linux/insano/fulcrum) | INSANE | Remote File Inclusion (RFI) · XML External Entity · Information Leakage · Active Directory · Brute Force / Rate-Limit Bypass · Port Forwarding / Pivoting · Server-Side Request Forgery · Remote Code Execution (RCE) | 3 |
| [Jail](/htb/machines/linux/insano/jail) | INSANE | Buffer Overflow (BoF / ROP) | 3 |
| [Nightmare](/htb/machines/linux/insano/nightmare) | INSANE | OS Command Injection · SQL Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 2 |
| [Reddish](/htb/machines/linux/insano/reddish) | INSANE | Port Forwarding / Pivoting | 3 |
| [Sink](/htb/machines/linux/insano/sink) | INSANE | HTTP Request Smuggling · Information Leakage | 3 |
| [Stacked](/htb/machines/linux/insano/stacked) | INSANE | Subdomain Enumeration · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [Toby](/htb/machines/linux/insano/toby) | INSANE | Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting | 3 |
## Windows (63)
| Máquina | Dificultad | Skills | Writeups |
| -------------------------------------------------------- | ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------: |
| [Active](/htb/machines/windows/facil/active) | EASY | Kerberoasting · SMB (139/445) · Group Policy Preferences (GPP) | 4 |
| [Arctic](/htb/machines/windows/facil/arctic) | EASY | Directory / Path Traversal · Cracking Hashes (hashcat / John) | 3 |
| [Blue](/htb/machines/windows/facil/blue) | EASY | EternalBlue (MS17-010) | 4 |
| [Bounty](/htb/machines/windows/facil/bounty) | EASY | File Upload Vulnerabilities · Fuzzing de directorios · IIS (Microsoft Web Server) | 4 |
| [Buff](/htb/machines/windows/facil/buff) | EASY | Buffer Overflow (BoF / ROP) · Remote Code Execution (RCE) | 3 |
| [Curling](/htb/machines/windows/facil/curling) | EASY | Information Leakage · Remote Code Execution (RCE) | 3 |
| [Devel](/htb/machines/windows/facil/devel) | EASY | IIS (Microsoft Web Server) | 4 |
| [Driver](/htb/machines/windows/facil/driver) | EASY | Password Guessing SCF Malicious File Print Spooler Local Privilege Escalation… | 4 |
| [Forest](/htb/machines/windows/facil/forest) | EASY | Cracking Hashes (hashcat / John) · Transferencia de zona DNS · BloodHound · DCSync | 4 |
| [Grandpa](/htb/machines/windows/facil/grandpa) | EASY | WebDAV · IIS (Microsoft Web Server) · Remote Code Execution (RCE) | 3 |
| [Granny](/htb/machines/windows/facil/granny) | EASY | WebDAV · IIS (Microsoft Web Server) · Remote Code Execution (RCE) | 3 |
| [Heist](/htb/machines/windows/facil/heist) | EASY | Information Leakage · SMB (139/445) | 3 |
| [Jerry](/htb/machines/windows/facil/jerry) | EASY | Information Leakage | 3 |
| [Legacy](/htb/machines/windows/facil/legacy) | EASY | EternalBlue (MS17-010) | 4 |
| [Love](/htb/machines/windows/facil/love) | EASY | Server-Side Request Forgery | 3 |
| [Netmon](/htb/machines/windows/facil/netmon) | EASY | Information Leakage · OS Command Injection · Remote Code Execution (RCE) | 3 |
| [Optimum](/htb/machines/windows/facil/optimum) | EASY | HttpFileServer (CVE-2014-6287) · Remote Code Execution (RCE) | 4 |
| [Remote](/htb/machines/windows/facil/remote) | EASY | Remote Code Execution (RCE) · Information Leakage | 4 |
| [Return](/htb/machines/windows/facil/return) | EASY | Abusing Printer Abusing Server Operators Group Service Configuration… | 4 |
| [Sauna](/htb/machines/windows/facil/sauna) | EASY | Information Leakage · Cracking Hashes (hashcat / John) · BloodHound · GetNPUsers (Impacket) · AutoLogon credentials · winPEAS · DCSync | 3 |
| [ServMon](/htb/machines/windows/facil/servmon) | EASY | Local File Inclusion (LFI) · Directory / Path Traversal · Port Forwarding / Pivoting | 3 |
| [TimeLapse](/htb/machines/windows/facil/timelapse) | EASY | Information Leakage · Port Forwarding / Pivoting · SMB (139/445) | 3 |
| [Toolbox](/htb/machines/windows/facil/toolbox) | EASY | SQL Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 3 |
| [Atom](/htb/machines/windows/medio/atom) | MEDIUM | Redis Exploitation · SMB (139/445) · Remote Code Execution (RCE) | 4 |
| [Bart](/htb/machines/windows/medio/bart) | MEDIUM | Subdomain Enumeration · Information Leakage · Fuzzing de directorios · Remote Code Execution (RCE) | 4 |
| [Bastard](/htb/machines/windows/medio/bastard) | MEDIUM | Remote Code Execution (RCE) · SQL Injection | 3 |
| [Cascade](/htb/machines/windows/medio/cascade) | MEDIUM | Active Directory · Port Forwarding / Pivoting · Kerberoasting · GetNPUsers (Impacket) · SQL Injection · SMB (139/445) | 3 |
| [Chatterbox](/htb/machines/windows/medio/chatterbox) | MEDIUM | Buffer Overflow (BoF / ROP) | 3 |
| [Giddy](/htb/machines/windows/medio/giddy) | MEDIUM | SQL Injection | 3 |
| [Intelligence](/htb/machines/windows/medio/intelligence) | MEDIUM | Information Leakage · Active Directory · BloodHound · Remote Code Execution (RCE) | 3 |
| [Jeeves](/htb/machines/windows/medio/jeeves) | MEDIUM | Jenkins Exploitation (Groovy Script Console) RottenPotato… | 4 |
| [Json](/htb/machines/windows/medio/json) | MEDIUM | Insecure Deserialization · Remote Code Execution (RCE) | 4 |
| [Monteverde](/htb/machines/windows/medio/monteverde) | MEDIUM | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 |
| [Querier](/htb/machines/windows/medio/querier) | MEDIUM | Active Directory | 4 |
| [Resolute](/htb/machines/windows/medio/resolute) | MEDIUM | Information Leakage · SMB (139/445) | 3 |
| [Scrambled](/htb/machines/windows/medio/scrambled) | MEDIUM | Information Leakage · Cracking Hashes (hashcat / John) · Insecure Deserialization · Kerberoasting · GetNPUsers (Impacket) · SMB (139/445) · Remote Code Execution (RCE) | 7 |
| [SecNotes](/htb/machines/windows/medio/secnotes) | MEDIUM | CSRF (Cross-Site Request Forgery) · Information Leakage · SQL Injection · Fuzzing de directorios · IIS (Microsoft Web Server) · Cross-Site Scripting (XSS) | 4 |
| [Silo](/htb/machines/windows/medio/silo) | MEDIUM | File Upload Vulnerabilities | 4 |
| [Sniper](/htb/machines/windows/medio/sniper) | MEDIUM | Remote File Inclusion (RFI) · Local File Inclusion (LFI) · Information Leakage · Port Forwarding / Pivoting · SMB (139/445) · Remote Code Execution (RCE) | 4 |
| [StreamIO](/htb/machines/windows/medio/streamio) | MEDIUM | Remote File Inclusion (RFI) · Local File Inclusion (LFI) · Information Leakage · Cracking Hashes (hashcat / John) · SQL Injection · BloodHound · AS-REP Roasting · SMB (139/445) · Remote Code Execution (RCE) | 4 |
| [Worker](/htb/machines/windows/medio/worker) | MEDIUM | Information Leakage · Fuzzing de directorios · IIS (Microsoft Web Server) · Remote Code Execution (RCE) | 3 |
| [Acute](/htb/machines/windows/dificil/acute) | HARD | Information Leakage · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting | 3 |
| [Blackfield](/htb/machines/windows/dificil/blackfield) | HARD | Active Directory · BloodHound · GetNPUsers (Impacket) · SMB (139/445) · Remote Code Execution (RCE) | 3 |
| [Breadcrumbs](/htb/machines/windows/dificil/breadcrumbs) | HARD | Local File Inclusion (LFI) · SQL Injection · JSON Web Tokens (JWT) | 3 |
| [Conceal](/htb/machines/windows/dificil/conceal) | HARD | SNMP Enumeration · File Upload Vulnerabilities · IIS (Microsoft Web Server) · Remote Code Execution (RCE) | 4 |
| [Control](/htb/machines/windows/dificil/control) | HARD | SQL Injection · winPEAS · Remote Code Execution (RCE) | 4 |
| [Hancliffe](/htb/machines/windows/dificil/hancliffe) | HARD | SSTI (Server-Side Template Injection) · Buffer Overflow (BoF / ROP) · Remote Code Execution (RCE) | 3 |
| [Helpline](/htb/machines/windows/dificil/helpline) | HARD | Remote Code Execution (RCE) · Authentication Vulnerabilities | 6 |
| [Mantis](/htb/machines/windows/dificil/mantis) | HARD | Active Directory · BloodHound | 3 |
| [Object](/htb/machines/windows/dificil/object) | HARD | Active Directory · BloodHound · Remote Code Execution (RCE) | 3 |
| [RE](/htb/machines/windows/dificil/re) | HARD | XML External Entity · Cracking Hashes (hashcat / John) · IIS (Microsoft Web Server) · Remote Code Execution (RCE) | 4 |
| [Reel](/htb/machines/windows/dificil/reel) | HARD | Information Leakage · Active Directory · Remote Code Execution (RCE) | 3 |
| [Reel2](/htb/machines/windows/dificil/reel2) | HARD | Information Leakage · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 |
| [Search](/htb/machines/windows/dificil/search) | HARD | Information Leakage · Active Directory · Kerberoasting · BloodHound · SMB (139/445) | 4 |
| [Tally](/htb/machines/windows/dificil/tally) | HARD | Information Leakage · Remote Code Execution (RCE) | 3 |
| [Anubis](/htb/machines/windows/insano/anubis) | INSANE | SSTI (Server-Side Template Injection) · Cross-Site Scripting (XSS) · Information Leakage · OS Command Injection · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · SMB (139/445) · Remote Code Execution (RCE) | 3 |
| [APT](/htb/machines/windows/insano/apt) | INSANE | Cracking Hashes (hashcat / John) · winPEAS · SMB (139/445) | 4 |
| [Bankrobber](/htb/machines/windows/insano/bankrobber) | INSANE | Brute Force / Rate-Limit Bypass · SQL Injection · SMB (139/445) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 |
| [Fighter](/htb/machines/windows/insano/fighter) | INSANE | SQL Injection · Abuso de cron · Remote Code Execution (RCE) | 3 |
| [Hackback](/htb/machines/windows/insano/hackback) | INSANE | Subdomain Enumeration · Information Leakage · Fuzzing de directorios · Remote Code Execution (RCE) | 3 |
| [Minion](/htb/machines/windows/insano/minion) | INSANE | Server-Side Request Forgery | 3 |
| [MultiMaster](/htb/machines/windows/insano/multimaster) | INSANE | Information Leakage · Active Directory · SQL Injection · Brute Force / Rate-Limit Bypass · BloodHound · WebSockets Vulnerabilities · Port Forwarding / Pivoting · AS-REP Roasting · SMB (139/445) · Remote Code Execution (RCE) | 3 |
| [Sizzle](/htb/machines/windows/insano/sizzle) | INSANE | Active Directory · Kerberoasting · BloodHound · DCSync · Port Forwarding / Pivoting · SMB (139/445) | 4 |
*Última actualización: 2026-07-13*