> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Linux · Difícil

> Máquinas de Linux con dificultad Difícil

# Linux · Difícil

32 máquinas en esta categoría.

| Máquina                                                    | Skills                                                                                                                                                                                                                                                                        | Writeups |
| ---------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------: |
| [AdmirerToo](/htb/machines/linux/dificil/admirertoo)       | Remote Code Execution (RCE) · Subdomain Enumeration · Server-Side Request Forgery                                                                                                                                                                                             |        3 |
| [Altered](/htb/machines/linux/dificil/altered)             | Brute Force / Rate-Limit Bypass · SQL Injection · Type Juggling / Confusion · Remote Code Execution (RCE)                                                                                                                                                                     |        4 |
| [Charon](/htb/machines/linux/dificil/charon)               | Cracking Hashes (hashcat / John) · SQL Injection · SUID binaries                                                                                                                                                                                                              |        3 |
| [CrimeStoppers](/htb/machines/linux/dificil/crimestoppers) | Local File Inclusion (LFI) · Remote Code Execution (RCE)                                                                                                                                                                                                                      |        3 |
| [Dab](/htb/machines/linux/dificil/dab)                     | Cracking Hashes (hashcat / John) · Server-Side Request Forgery · SUID binaries · Fuzzing de directorios · Remote Code Execution (RCE)                                                                                                                                         |        3 |
| [EarlyAccess](/htb/machines/linux/dificil/earlyaccess)     | Information Leakage · Port Forwarding / Pivoting · SQL Injection · Local File Inclusion (LFI) · Cross-Site Scripting (XSS)                                                                                                                                                    |        3 |
| [Ellingson](/htb/machines/linux/dificil/ellingson)         | Buffer Overflow (BoF / ROP) · SUID binaries · Remote Code Execution (RCE)                                                                                                                                                                                                     |        3 |
| [Falafel](/htb/machines/linux/dificil/falafel)             | Information Leakage · SQL Injection · Type Juggling / Confusion · File Upload Vulnerabilities                                                                                                                                                                                 |        3 |
| [Feline](/htb/machines/linux/dificil/feline)               | Information Leakage · Insecure Deserialization · Directory / Path Traversal · Port Forwarding / Pivoting · Remote Code Execution (RCE)                                                                                                                                        |        4 |
| [Flujab](/htb/machines/linux/dificil/flujab)               | SQL Injection · SUID binaries · Remote Code Execution (RCE)                                                                                                                                                                                                                   |        3 |
| [Holiday](/htb/machines/linux/dificil/holiday)             | SQL Injection · Remote Code Execution (RCE) · Cross-Site Scripting (XSS)                                                                                                                                                                                                      |        3 |
| [Joker](/htb/machines/linux/dificil/joker)                 | Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Remote Code Execution (RCE)                                                                                                                                                                                   |        3 |
| [Kotarak](/htb/machines/linux/dificil/kotarak)             | Information Leakage · Port Forwarding / Pivoting · Server-Side Request Forgery                                                                                                                                                                                                |        3 |
| [Mischief](/htb/machines/linux/dificil/mischief)           | Information Leakage · SNMP Enumeration                                                                                                                                                                                                                                        |        4 |
| [Monitors](/htb/machines/linux/dificil/monitors)           | Local File Inclusion (LFI) · Information Leakage · Insecure Deserialization · WordPress Exploitation · Remote Code Execution (RCE)                                                                                                                                            |        4 |
| [Oouch](/htb/machines/linux/dificil/oouch)                 | Subdomain Enumeration · Information Leakage · Port Forwarding / Pivoting · OAuth Authentication Vulnerabilities · Remote Code Execution (RCE)                                                                                                                                 |        3 |
| [Overflow](/htb/machines/linux/dificil/overflow)           | Buffer Overflow (BoF / ROP) · SQL Injection · Remote Code Execution (RCE)                                                                                                                                                                                                     |        4 |
| [OverGraph](/htb/machines/linux/dificil/overgraph)         | Subdomain Enumeration · Cross-Site Scripting (XSS) · Information Leakage · SQL Injection · File Upload Vulnerabilities · Fuzzing de directorios · GraphQL Vulnerabilities · Server-Side Request Forgery · SUID binaries · Remote Code Execution (RCE) · JSON Web Tokens (JWT) |        3 |
| [Oz](/htb/machines/linux/dificil/oz)                       | SSTI (Server-Side Template Injection) · SQL Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE)                                                                                                                                                              |        3 |
| [Phoenix](/htb/machines/linux/dificil/phoenix)             | Cracking Hashes (hashcat / John) · SQL Injection · File Upload Vulnerabilities · WordPress Exploitation                                                                                                                                                                       |        3 |
| [Player](/htb/machines/linux/dificil/player)               | Subdomain Enumeration · Information Leakage · OS Command Injection · Remote Code Execution (RCE) · JSON Web Tokens (JWT)                                                                                                                                                      |        4 |
| [Pressed](/htb/machines/linux/dificil/pressed)             | WordPress Exploitation                                                                                                                                                                                                                                                        |        3 |
| [Quick](/htb/machines/linux/dificil/quick)                 | Information Leakage · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) · Cross-Site Scripting (XSS)                                                                                                                                                              |        4 |
| [Scavenger](/htb/machines/linux/dificil/scavenger)         | Transferencia de zona DNS · SQL Injection                                                                                                                                                                                                                                     |        3 |
| [Shrek](/htb/machines/linux/dificil/shrek)                 | Information Leakage · Steganography (Stego) · Port Forwarding / Pivoting                                                                                                                                                                                                      |        3 |
| [Static](/htb/machines/linux/dificil/static)               | Port Forwarding / Pivoting · SUID binaries · Remote Code Execution (RCE)                                                                                                                                                                                                      |        3 |
| [Talkative](/htb/machines/linux/dificil/talkative)         | Information Leakage · Port Forwarding / Pivoting · Remote Code Execution (RCE) · File Upload Vulnerabilities                                                                                                                                                                  |        3 |
| [Tentacle](/htb/machines/linux/dificil/tentacle)           | Active Directory                                                                                                                                                                                                                                                              |        3 |
| [Travel](/htb/machines/linux/dificil/travel)               | WordPress Exploitation · Insecure Deserialization · Remote Code Execution (RCE)                                                                                                                                                                                               |        3 |
| [Unbalanced](/htb/machines/linux/dificil/unbalanced)       | Information Leakage · Cracking Hashes (hashcat / John) · Port Forwarding / Pivoting · Pi-hole credenciales por defecto · Remote Code Execution (RCE)                                                                                                                          |        3 |
| [Unobtainium](/htb/machines/linux/dificil/unobtainium)     | Local File Inclusion (LFI) · Information Leakage · Prototype Pollution · OS Command Injection · Port Forwarding / Pivoting · Remote Code Execution (RCE)                                                                                                                      |        3 |
| [Zetta](/htb/machines/linux/dificil/zetta)                 | Information Leakage · SQL Injection · Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE)                                                                                                                                                                           |        3 |
