Information Leakage

Recursos cross-platform para Information Leakage: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

Esta página agrega los recursos para practicar Information Leakage de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Cobertura: 80 retos en 2 plataformas — 74 HackTheBox · 6 PortSwigger. 74 con writeup en español, 74 con writeup en vídeo.

​

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

1. PortSwigger — Authentication bypass via information disclosure (Apprentice) · 🇬🇧
2. PortSwigger — Information disclosure in error messages (Apprentice) · 🇬🇧
3. PortSwigger — Information disclosure on debug page (Apprentice) · 🇬🇧
4. PortSwigger — Source code disclosure via backup files (Apprentice) · 🇬🇧
5. HackTheBox — Admirer (Fácil) · 🇪🇸 🇬🇧 📹
6. HackTheBox — Bank (Fácil) · 🇪🇸 🇬🇧 📹

​

Recursos curados

Fuente	Enlace
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/information-leak.html

​

Máquinas HTB que practican Information Leakage (74)

Máquina	SO	Dificultad	Writeup
Acute	Windows	HARD	🇪🇸 🇬🇧 📹
Admirer	Linux	EASY	🇪🇸 🇬🇧 📹
Anubis	Windows	INSANE	🇪🇸 🇬🇧 📹
Apocalyst	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Backend	Linux	MEDIUM	🇪🇸 🇬🇧 📹
BackendTwo	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Bank	Linux	EASY	🇪🇸 🇬🇧 📹
Bart	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Beep	Linux	EASY	🇪🇸 🇬🇧 📹
Blocky	Linux	EASY	🇪🇸 🇬🇧 📹
Bolt	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Brainfuck	Linux	INSANE	🇪🇸 🇬🇧 📹
Cache	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Catch	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Curling	Windows	EASY	🇪🇸 🇬🇧 📹
Delivery	Linux	EASY	🇪🇸 🇬🇧 📹
DevOops	Linux	MEDIUM	🇪🇸 🇬🇧 📹
EarlyAccess	Linux	HARD	🇪🇸 🇬🇧 📹
Falafel	Linux	HARD	🇪🇸 🇬🇧 📹
Feline	Linux	HARD	🇪🇸 🇬🇧 📹
Flustered	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Frolic	Linux	EASY	🇪🇸 🇬🇧 📹
Fulcrum	Linux	INSANE	🇪🇸 🇬🇧 📹
Hackback	Windows	INSANE	🇪🇸 🇬🇧 📹
Haystack	Linux	EASY	🇪🇸 🇬🇧 📹
Heist	Windows	EASY	🇪🇸 🇬🇧 📹
Horizontall	Linux	EASY	🇪🇸 🇬🇧 📹
Intelligence	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Jerry	Windows	EASY	🇪🇸 🇬🇧 📹
Jewel	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Kotarak	Linux	HARD	🇪🇸 🇬🇧 📹
Laboratory	Linux	EASY	🇪🇸 🇬🇧 📹
Luke	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Mischief	Linux	HARD	🇪🇸 🇬🇧 📹
Monitors	Linux	HARD	🇪🇸 🇬🇧 📹
MultiMaster	Windows	INSANE	🇪🇸 🇬🇧 📹
Netmon	Windows	EASY	🇪🇸 🇬🇧 📹
Node	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Noter	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Obscurity	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Oouch	Linux	HARD	🇪🇸 🇬🇧 📹
OpenSource	Linux	EASY	🇪🇸 🇬🇧 📹
OverGraph	Linux	HARD	🇪🇸 🇬🇧 📹
Pandora	Linux	EASY	🇪🇸 🇬🇧 📹
Paper	Linux	EASY	🇪🇸 🇬🇧 📹
Pit	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Player	Linux	HARD	🇪🇸 🇬🇧 📹
Quick	Linux	HARD	🇪🇸 🇬🇧 📹
Reel	Windows	HARD	🇪🇸 🇬🇧 📹
Reel2	Windows	HARD	🇪🇸 🇬🇧 📹
Remote	Windows	EASY	🇪🇸 🇬🇧 📹
Resolute	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Safe	Linux	EASY	🇪🇸 🇬🇧 📹
Sauna	Windows	EASY	🇪🇸 🇬🇧 📹
Scrambled	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Seal	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Search	Windows	HARD	🇪🇸 🇬🇧 📹
SecNotes	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Sense	Linux	EASY	🇪🇸 🇬🇧 📹
Shrek	Linux	HARD	🇪🇸 🇬🇧 📹
Sink	Linux	INSANE	🇪🇸 🇬🇧 📹
SneakyMailer	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Sniper	Windows	MEDIUM	🇪🇸 🇬🇧 📹
SolidState	Linux	MEDIUM	🇪🇸 🇬🇧 📹
StreamIO	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Talkative	Linux	HARD	🇪🇸 🇬🇧 📹
Tally	Windows	HARD	🇪🇸 🇬🇧 📹
Teacher	Linux	EASY	🇪🇸 🇬🇧 📹
TimeLapse	Windows	EASY	🇪🇸 🇬🇧 📹
Unbalanced	Linux	HARD	🇪🇸 🇬🇧 📹
Unobtainium	Linux	HARD	🇪🇸 🇬🇧 📹
Validation	Linux	EASY	🇪🇸 🇬🇧 📹
Worker	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Zetta	Linux	HARD	🇪🇸 🇬🇧 📹

​

Labs PortSwigger que practican Information Leakage (6)

Lab	Dificultad	Topic	Oficial
Authentication bypass via information disclosure	APPRENTICE	Information Disclosure	Abrir
Information disclosure in error messages	APPRENTICE	Information Disclosure	Abrir
Information disclosure on debug page	APPRENTICE	Information Disclosure	Abrir
Source code disclosure via backup files	APPRENTICE	Information Disclosure	Abrir
Information disclosure in version control history	PRACTITIONER	Information Disclosure	Abrir
Server-side template injection with information disclosure via user-supplied objects	PRACTITIONER	Server-Side Template Injection (SSTI)	Abrir

---

← Volver al glosario completo

Última actualización: 2026-08-24