> ## Documentation Index > Fetch the complete documentation index at: https://rootea.es/llms.txt > Use this file to discover all available pages before exploring further. # Linux · Medio > Máquinas de Linux con dificultad Medio # Linux · Medio 56 máquinas en esta categoría. | Máquina | Skills | Writeups | | -------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------: | | [Apocalyst](/htb/machines/linux/medio/apocalyst) | WordPress Exploitation · Information Leakage · Steganography (Stego) · Remote Code Execution (RCE) | 3 | | [Aragog](/htb/machines/linux/medio/aragog) | XML External Entity · WordPress Exploitation | 3 | | [Backend](/htb/machines/linux/medio/backend) | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 4 | | [BackendTwo](/htb/machines/linux/medio/backendtwo) | Information Leakage · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 | | [Bolt](/htb/machines/linux/medio/bolt) | SSTI (Server-Side Template Injection) · Subdomain Enumeration · Information Leakage | 3 | | [Book](/htb/machines/linux/medio/book) | Cross-Site Scripting (XSS) | 3 | | [Cache](/htb/machines/linux/medio/cache) | Access Control / IDOR · Authentication Vulnerabilities · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 | | [Catch](/htb/machines/linux/medio/catch) | SSTI (Server-Side Template Injection) · Information Leakage · SQL Injection · Remote Code Execution (RCE) | 3 | | [Celestial](/htb/machines/linux/medio/celestial) | Insecure Deserialization · Remote Code Execution (RCE) | 3 | | [Chaos](/htb/machines/linux/medio/chaos) | Remote Code Execution (RCE) | 3 | | [Cronos](/htb/machines/linux/medio/cronos) | OS Command Injection · Transferencia de zona DNS · SQL Injection | 3 | | [DevOops](/htb/machines/linux/medio/devoops) | XML External Entity · Information Leakage | 4 | | [Devzat](/htb/machines/linux/medio/devzat) | Fuzzing de directorios · Remote Code Execution (RCE) | 3 | | [Enterprise](/htb/machines/linux/medio/enterprise) | WordPress Exploitation · Buffer Overflow (BoF / ROP) · SQL Injection | 3 | | [Epsilon](/htb/machines/linux/medio/epsilon) | SSTI (Server-Side Template Injection) · Authentication Vulnerabilities · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 3 | | [Europa](/htb/machines/linux/medio/europa) | SQL Injection · Remote Code Execution (RCE) | 4 | | [Flustered](/htb/machines/linux/medio/flustered) | SSTI (Server-Side Template Injection) · Information Leakage · Remote Code Execution (RCE) | 3 | | [FluxCapacitor](/htb/machines/linux/medio/fluxcapacitor) | OS Command Injection · Fuzzing de directorios | 3 | | [Forge](/htb/machines/linux/medio/forge) | Server-Side Request Forgery | 3 | | [Haircut](/htb/machines/linux/medio/haircut) | OS Command Injection · Server-Side Request Forgery | 4 | | [Hawk](/htb/machines/linux/medio/hawk) | Brute Force / Rate-Limit Bypass · Remote Code Execution (RCE) | 3 | | [Inception](/htb/machines/linux/medio/inception) | Local File Inclusion (LFI) · Port Forwarding / Pivoting · WebDAV · Fuzzing de directorios | 3 | | [Jewel](/htb/machines/linux/medio/jewel) | Information Leakage · Cracking Hashes (hashcat / John) · Insecure Deserialization · Remote Code Execution (RCE) | 3 | | [Lazy](/htb/machines/linux/medio/lazy) | SUID binaries | 3 | | [Luke](/htb/machines/linux/medio/luke) | Information Leakage | 3 | | [Mango](/htb/machines/linux/medio/mango) | SQL Injection · SUID binaries | 3 | | [Meta](/htb/machines/linux/medio/meta) | Subdomain Enumeration · File Upload Vulnerabilities · Port Forwarding / Pivoting · Remote Code Execution (RCE) | 4 | | [Nineveh](/htb/machines/linux/medio/nineveh) | Remote Code Execution (RCE) · Local File Inclusion (LFI) · Steganography (Stego) · Brute Force / Rate-Limit Bypass | 3 | | [Node](/htb/machines/linux/medio/node) | Information Leakage · OS Command Injection · Cracking Hashes (hashcat / John) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting · SUID binaries | 4 | | [Noter](/htb/machines/linux/medio/noter) | SSTI (Server-Side Template Injection) · Information Leakage · OS Command Injection · Fuzzing de directorios · Remote Code Execution (RCE) · JSON Web Tokens (JWT) | 5 | | [Obscurity](/htb/machines/linux/medio/obscurity) | Information Leakage · OS Command Injection · Race Conditions · Remote Code Execution (RCE) | 4 | | [October](/htb/machines/linux/medio/october) | Buffer Overflow (BoF / ROP) | 3 | | [Passage](/htb/machines/linux/medio/passage) | CuteNews Exploitation Code Analysis USBCreator D-Bus Privilege Escalation… | 3 | | [Pit](/htb/machines/linux/medio/pit) | Information Leakage · SNMP Enumeration · Remote Code Execution (RCE) | 3 | | [Poison](/htb/machines/linux/medio/poison) | Local File Inclusion (LFI) · Remote Code Execution (RCE) | 4 | | [Ransom](/htb/machines/linux/medio/ransom) | Type Juggling / Confusion | 3 | | [RedCross](/htb/machines/linux/medio/redcross) | Subdomain Enumeration · Buffer Overflow (BoF / ROP) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 | | [Retired](/htb/machines/linux/medio/retired) | Local File Inclusion (LFI) · Buffer Overflow (BoF / ROP) · Port Forwarding / Pivoting | 4 | | [Schooled](/htb/machines/linux/medio/schooled) | Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) · Cross-Site Scripting (XSS) | 3 | | [Seal](/htb/machines/linux/medio/seal) | Information Leakage · Remote Code Execution (RCE) | 3 | | [Shibboleth](/htb/machines/linux/medio/shibboleth) | Remote Code Execution (RCE) | 3 | | [SneakyMailer](/htb/machines/linux/medio/sneakymailer) | Information Leakage | 3 | | [SolidState](/htb/machines/linux/medio/solidstate) | Information Leakage · Abuso de cron | 3 | | [Stratosphere](/htb/machines/linux/medio/stratosphere) | Apache Struts Exploitation (CVE-2017-5638) Python Library Hijacking (Privilege… | 3 | | [TartarSauce](/htb/machines/linux/medio/tartarsauce) | Remote File Inclusion (RFI) · WordPress Exploitation · Remote Code Execution (RCE) | 4 | | [Tenet](/htb/machines/linux/medio/tenet) | Insecure Deserialization · Race Conditions | 3 | | [Tenten](/htb/machines/linux/medio/tenten) | WordPress Exploitation · Cracking Hashes (hashcat / John) · Steganography (Stego) | 3 | | [TheNotebook](/htb/machines/linux/medio/thenotebook) | File Upload Vulnerabilities · JSON Web Tokens (JWT) | 3 | | [Time](/htb/machines/linux/medio/time) | Server-Side Request Forgery · Remote Code Execution (RCE) | 4 | | [Timing](/htb/machines/linux/medio/timing) | Local File Inclusion (LFI) · File Upload Vulnerabilities | 4 | | [Undetected](/htb/machines/linux/medio/undetected) | Subdomain Enumeration · Cracking Hashes (hashcat / John) · Remote Code Execution (RCE) | 3 | | [Unicode](/htb/machines/linux/medio/unicode) | Local File Inclusion (LFI) · JSON Web Tokens (JWT) | 3 | | [Union](/htb/machines/linux/medio/union) | OS Command Injection · SQL Injection · Remote Code Execution (RCE) | 4 | | [Waldo](/htb/machines/linux/medio/waldo) | Local File Inclusion (LFI) | 3 | | [Wall](/htb/machines/linux/medio/wall) | Brute Force / Rate-Limit Bypass · SUID binaries · Fuzzing de directorios · Remote Code Execution (RCE) | 3 | | [Writer](/htb/machines/linux/medio/writer) | OS Command Injection · Cracking Hashes (hashcat / John) · SQL Injection · Port Forwarding / Pivoting | 4 |