OS Command Injection

Recursos cross-platform para OS Command Injection: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

Esta página agrega los recursos para practicar OS Command Injection de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Cobertura: 27 retos en 3 plataformas — 17 HackTheBox · 5 PortSwigger · 5 TryHackMe. 17 con writeup en español, 17 con writeup en vídeo.

​

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

1. PortSwigger — OS command injection, simple case (Apprentice) · 🇬🇧
2. TryHackMe — Advent of Cyber 2022 (Easy · ~1440 min) · 🇬🇧
3. TryHackMe — Avengers Blog (Easy · ~30 min) · 🇬🇧
4. TryHackMe — Command Injection (Easy · ~20 min) · 🇬🇧
5. HackTheBox — Doctor (Fácil) · 🇪🇸 🇬🇧 📹
6. HackTheBox — Netmon (Fácil) · 🇪🇸 🇬🇧 📹

​

Recursos curados

Fuente	Enlace
PortSwigger	https://portswigger.net/web-security/os-command-injection

​

Máquinas HTB que practican OS Command Injection (17)

Máquina	SO	Dificultad	Writeup
Anubis	Windows	INSANE	🇪🇸 🇬🇧 📹
Cronos	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Doctor	Linux	EASY	🇪🇸 🇬🇧 📹
FluxCapacitor	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Fortune	Linux	INSANE	🇪🇸 🇬🇧 📹
Haircut	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Netmon	Windows	EASY	🇪🇸 🇬🇧 📹
Nightmare	Linux	INSANE	🇪🇸 🇬🇧 📹
Node	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Noter	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Obscurity	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Player	Linux	HARD	🇪🇸 🇬🇧 📹
RouterSpace	Linux	EASY	🇪🇸 🇬🇧 📹
ScriptKiddie	Linux	EASY	🇪🇸 🇬🇧 📹
Union	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Unobtainium	Linux	HARD	🇪🇸 🇬🇧 📹
Writer	Linux	MEDIUM	🇪🇸 🇬🇧 📹

​

Labs PortSwigger que practican OS Command Injection (5)

Lab	Dificultad	Topic	Oficial
OS command injection, simple case	APPRENTICE	OS Command Injection	Abrir
Blind OS command injection with out-of-band data exfiltration	PRACTITIONER	OS Command Injection	Abrir
Blind OS command injection with out-of-band interaction	PRACTITIONER	OS Command Injection	Abrir
Blind OS command injection with output redirection	PRACTITIONER	OS Command Injection	Abrir
Blind OS command injection with time delays	PRACTITIONER	OS Command Injection	Abrir

​

Rooms TryHackMe que practican OS Command Injection (5)

Room	Dificultad	Tipo	Acceso	Oficial
Advent of Cyber 2022	EASY	Walkthrough	🟢 Free	Abrir
Avengers Blog	EASY	Walkthrough	🔵 VIP	Abrir
Command Injection	EASY	Walkthrough	🔵 VIP	Abrir
Web Attack Forensics - Drone Alone	MEDIUM	Walkthrough	🟢 Free	Abrir
envizon	HARD	Challenge	🟢 Free	Abrir

​

Skills relacionadas

• /skills/rce

---

← Volver al glosario completo

Última actualización: 2026-08-17