> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Local File Inclusion (LFI)

> Recursos cross-platform para Local File Inclusion (LFI): máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

# Local File Inclusion (LFI)

Esta página agrega los **recursos para practicar Local File Inclusion (LFI)** de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

## Recursos curados

| Fuente               | Enlace                                                                                                                                                               |
| -------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks           | [https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html](https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html)                 |
| PayloadsAllTheThings | [https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion) |

## Máquinas HTB que practican Local File Inclusion (LFI) (19)

| Máquina                                                    | SO      | Dificultad                                           |
| ---------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [Backdoor](/htb/machines/linux/facil/backdoor)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Beep](/htb/machines/linux/facil/beep)                     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Breadcrumbs](/htb/machines/windows/dificil/breadcrumbs)   | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [CrimeStoppers](/htb/machines/linux/dificil/crimestoppers) | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [EarlyAccess](/htb/machines/linux/dificil/earlyaccess)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Inception](/htb/machines/linux/medio/inception)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Monitors](/htb/machines/linux/dificil/monitors)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Nineveh](/htb/machines/linux/medio/nineveh)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [OpenSource](/htb/machines/linux/facil/opensource)         | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Poison](/htb/machines/linux/medio/poison)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Retired](/htb/machines/linux/medio/retired)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [ServMon](/htb/machines/windows/facil/servmon)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Sniper](/htb/machines/windows/medio/sniper)               | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [StreamIO](/htb/machines/windows/medio/streamio)           | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Tabby](/htb/machines/linux/facil/tabby)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Timing](/htb/machines/linux/medio/timing)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Unicode](/htb/machines/linux/medio/unicode)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Unobtainium](/htb/machines/linux/dificil/unobtainium)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Waldo](/htb/machines/linux/medio/waldo)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |

## Rooms TryHackMe que practican Local File Inclusion (LFI) (8)

| Room                                                            | Dificultad                                         | Tipo        | Acceso  | Oficial                                                  |
| --------------------------------------------------------------- | -------------------------------------------------- | ----------- | ------- | -------------------------------------------------------- |
| [Advent of Cyber 2023](/tryhackme/rooms/adventofcyber2023)      | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber2023)    |
| [Advent of Cyber 3 (2021)](/tryhackme/rooms/adventofcyber3)     | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber3)       |
| [Archangel](/tryhackme/rooms/archangel)                         | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/archangel)            |
| [Insekube](/tryhackme/rooms/insekube)                           | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/insekube)             |
| [Web Application Basics](/tryhackme/rooms/webapplicationbasics) | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/webapplicationbasics) |
| [dogcat](/tryhackme/rooms/dogcat)                               | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/dogcat)               |
| [File Inclusion](/tryhackme/rooms/fileinc)                      | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/fileinc)              |
| [NahamStore](/tryhackme/rooms/nahamstore)                       | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/nahamstore)           |

## Skills relacionadas

* [/skills/rfi](/skills/rfi)
* [/skills/rce](/skills/rce)

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Local File Inclusion (LFI)","termCode":"lfi","inLanguage":"es","url":"https://rootea.es/skills/lfi","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"Máquinas HTB que practican Local File Inclusion (LFI)","numberOfItems":19,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/htb/machines/linux/facil/backdoor","name":"Backdoor"},{"@type":"ListItem","position":2,"url":"https://rootea.es/htb/machines/linux/facil/beep","name":"Beep"},{"@type":"ListItem","position":3,"url":"https://rootea.es/htb/machines/windows/dificil/breadcrumbs","name":"Breadcrumbs"},{"@type":"ListItem","position":4,"url":"https://rootea.es/htb/machines/linux/dificil/crimestoppers","name":"CrimeStoppers"},{"@type":"ListItem","position":5,"url":"https://rootea.es/htb/machines/linux/dificil/earlyaccess","name":"EarlyAccess"},{"@type":"ListItem","position":6,"url":"https://rootea.es/htb/machines/linux/medio/inception","name":"Inception"},{"@type":"ListItem","position":7,"url":"https://rootea.es/htb/machines/linux/dificil/monitors","name":"Monitors"},{"@type":"ListItem","position":8,"url":"https://rootea.es/htb/machines/linux/medio/nineveh","name":"Nineveh"},{"@type":"ListItem","position":9,"url":"https://rootea.es/htb/machines/linux/facil/opensource","name":"OpenSource"},{"@type":"ListItem","position":10,"url":"https://rootea.es/htb/machines/linux/medio/poison","name":"Poison"},{"@type":"ListItem","position":11,"url":"https://rootea.es/htb/machines/linux/medio/retired","name":"Retired"},{"@type":"ListItem","position":12,"url":"https://rootea.es/htb/machines/windows/facil/servmon","name":"ServMon"},{"@type":"ListItem","position":13,"url":"https://rootea.es/htb/machines/windows/medio/sniper","name":"Sniper"},{"@type":"ListItem","position":14,"url":"https://rootea.es/htb/machines/windows/medio/streamio","name":"StreamIO"},{"@type":"ListItem","position":15,"url":"https://rootea.es/htb/machines/linux/facil/tabby","name":"Tabby"},{"@type":"ListItem","position":16,"url":"https://rootea.es/htb/machines/linux/medio/timing","name":"Timing"},{"@type":"ListItem","position":17,"url":"https://rootea.es/htb/machines/linux/medio/unicode","name":"Unicode"},{"@type":"ListItem","position":18,"url":"https://rootea.es/htb/machines/linux/dificil/unobtainium","name":"Unobtainium"},{"@type":"ListItem","position":19,"url":"https://rootea.es/htb/machines/linux/medio/waldo","name":"Waldo"}]}`}
</script>

*Última actualización: 2026-05-09*