Remote Code Execution (RCE) - HTB Writeups Hub

Esta página agrega los recursos para practicar Remote Code Execution (RCE) de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas. Cobertura: 222 retos en 3 plataformas — 104 HackTheBox · 15 PortSwigger · 103 TryHackMe. 104 con writeup en español, 106 con writeup en vídeo.

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

PortSwigger — 2FA bypass using a brute-force attack (Apprentice) · 🇬🇧
PortSwigger — Broken brute-force protection, multiple credentials per request (Apprentice) · 🇬🇧
PortSwigger — DOM XSS in document.write sink using source location.search (Apprentice) · 🇬🇧
PortSwigger — DOM XSS in innerHTML sink using source location.search (Apprentice) · 🇬🇧
PortSwigger — DOM XSS in jQuery anchor href attribute sink using location.search source (Apprentice) · 🇬🇧 📹
PortSwigger — Flawed enforcement of business rules (Apprentice) · 🇬🇧

Recursos curados

Fuente	Enlace
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/command-injection.html

Máquinas HTB que practican Remote Code Execution (RCE) (104)

Máquina	SO	Dificultad	Writeup
AdmirerToo	Linux	HARD	🇪🇸 🇬🇧 📹
Altered	Linux	HARD	🇪🇸 🇬🇧 📹
Anubis	Windows	INSANE	🇪🇸 🇬🇧 📹
Apocalyst	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Atom	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Backdoor	Linux	EASY	🇪🇸 🇬🇧 📹
Backend	Linux	MEDIUM	🇪🇸 🇬🇧 📹
BackendTwo	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Bank	Linux	EASY	🇪🇸 🇬🇧 📹
Bankrobber	Windows	INSANE	🇪🇸 🇬🇧 📹
Bart	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Bastard	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Beep	Linux	EASY	🇪🇸 🇬🇧 📹
Blackfield	Windows	HARD	🇪🇸 🇬🇧 📹
Buff	Windows	EASY	🇪🇸 🇬🇧 📹
Cache	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Catch	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Celestial	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Chaos	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Conceal	Windows	HARD	🇪🇸 🇬🇧 📹
Control	Windows	HARD	🇪🇸 🇬🇧 📹
CrimeStoppers	Linux	HARD	🇪🇸 🇬🇧 📹
CrossFit	Linux	INSANE	🇪🇸 🇬🇧 📹
CTF	Linux	INSANE	🇪🇸 🇬🇧 📹
Curling	Windows	EASY	🇪🇸 🇬🇧 📹
Dab	Linux	HARD	🇪🇸 🇬🇧 📹
Devzat	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Doctor	Linux	EASY	🇪🇸 🇬🇧 📹
Ellingson	Linux	HARD	🇪🇸 🇬🇧 📹
Epsilon	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Europa	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Feline	Linux	HARD	🇪🇸 🇬🇧 📹
Fighter	Windows	INSANE	🇪🇸 🇬🇧 📹
Flujab	Linux	HARD	🇪🇸 🇬🇧 📹
Flustered	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Frolic	Linux	EASY	🇪🇸 🇬🇧 📹
Fulcrum	Linux	INSANE	🇪🇸 🇬🇧 📹
Grandpa	Windows	EASY	🇪🇸 🇬🇧 📹
Granny	Windows	EASY	🇪🇸 🇬🇧 📹
Hackback	Windows	INSANE	🇪🇸 🇬🇧 📹
Hancliffe	Windows	HARD	🇪🇸 🇬🇧 📹
Hawk	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Helpline	Windows	HARD	🇪🇸 🇬🇧 📹
Holiday	Linux	HARD	🇪🇸 🇬🇧 📹
Intelligence	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Jewel	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Joker	Linux	HARD	🇪🇸 🇬🇧 📹
Json	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Knife	Linux	EASY	🇪🇸 🇬🇧 📹
Laboratory	Linux	EASY	🇪🇸 🇬🇧 📹
Meta	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Monitors	Linux	HARD	🇪🇸 🇬🇧 📹
Monteverde	Windows	MEDIUM	🇪🇸 🇬🇧 📹
MultiMaster	Windows	INSANE	🇪🇸 🇬🇧 📹
Netmon	Windows	EASY	🇪🇸 🇬🇧 📹
Nibbles	Linux	EASY	🇪🇸 🇬🇧 📹
Nightmare	Linux	INSANE	🇪🇸 🇬🇧 📹
Nineveh	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Noter	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Object	Windows	HARD	🇪🇸 🇬🇧 📹
Obscurity	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Oouch	Linux	HARD	🇪🇸 🇬🇧 📹
OpenSource	Linux	EASY	🇪🇸 🇬🇧 📹
Optimum	Windows	EASY	🇪🇸 🇬🇧 📹
Overflow	Linux	HARD	🇪🇸 🇬🇧 📹
OverGraph	Linux	HARD	🇪🇸 🇬🇧 📹
Oz	Linux	HARD	🇪🇸 🇬🇧 📹
Pandora	Linux	EASY	🇪🇸 🇬🇧 📹
Pit	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Player	Linux	HARD	🇪🇸 🇬🇧 📹
Poison	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Quick	Linux	HARD	🇪🇸 🇬🇧 📹
RE	Windows	HARD	🇪🇸 🇬🇧 📹
RedCross	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Reel	Windows	HARD	🇪🇸 🇬🇧 📹
Reel2	Windows	HARD	🇪🇸 🇬🇧 📹
Remote	Windows	EASY	🇪🇸 🇬🇧 📹
RouterSpace	Linux	EASY	🇪🇸 🇬🇧 📹
Schooled	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Scrambled	Windows	MEDIUM	🇪🇸 🇬🇧 📹
ScriptKiddie	Linux	EASY	🇪🇸 🇬🇧 📹
Seal	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Sense	Linux	EASY	🇪🇸 🇬🇧 📹
Shibboleth	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Sniper	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Stacked	Linux	INSANE	🇪🇸 🇬🇧 📹
Static	Linux	HARD	🇪🇸 🇬🇧 📹
StreamIO	Windows	MEDIUM	🇪🇸 🇬🇧 📹
SwagShop	Linux	EASY	🇪🇸 🇬🇧 📹
Talkative	Linux	HARD	🇪🇸 🇬🇧 📹
Tally	Windows	HARD	🇪🇸 🇬🇧 📹
TartarSauce	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Teacher	Linux	EASY	🇪🇸 🇬🇧 📹
Time	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Toolbox	Windows	EASY	🇪🇸 🇬🇧 📹
Travel	Linux	HARD	🇪🇸 🇬🇧 📹
Unbalanced	Linux	HARD	🇪🇸 🇬🇧 📹
Undetected	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Union	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Unobtainium	Linux	HARD	🇪🇸 🇬🇧 📹
Validation	Linux	EASY	🇪🇸 🇬🇧 📹
Wall	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Worker	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Zetta	Linux	HARD	🇪🇸 🇬🇧 📹

Labs PortSwigger que practican Remote Code Execution (RCE) (15)

Lab	Dificultad	Topic	Oficial
2FA bypass using a brute-force attack	APPRENTICE	Authentication Vulnerabilities	Abrir
Broken brute-force protection, multiple credentials per request	APPRENTICE	Authentication Vulnerabilities	Abrir
DOM XSS in document.write sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in innerHTML sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in jQuery anchor href attribute sink using location.search source	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Flawed enforcement of business rules	APPRENTICE	Business Logic Vulnerabilities	Abrir
Remote code execution via web shell upload	APPRENTICE	File Upload Vulnerabilities	Abrir
Source code disclosure via backup files	APPRENTICE	Information Disclosure	Abrir
Broken brute-force protection, IP block	PRACTITIONER	Authentication Vulnerabilities	Abrir
Bypassing GraphQL brute force protections	PRACTITIONER	GraphQL	Abrir
DOM XSS in document.write sink using source location.search inside a select element	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Forced OAuth profile linking	PRACTITIONER	OAuth Authentication	Abrir
Password brute-force via password change	PRACTITIONER	Authentication Vulnerabilities	Abrir
Remote code execution via polyglot web shell upload	PRACTITIONER	File Upload Vulnerabilities	Abrir
Remote code execution via server-side prototype pollution	PRACTITIONER	Prototype Pollution	Abrir

Rooms TryHackMe que practican Remote Code Execution (RCE) (103)

Room	Dificultad	Tipo	Acceso	Oficial
History of Malware	INFO	Walkthrough	🟢 Free	Abrir
OverlayFS - CVE-2021-3493	INFO	Walkthrough	🟢 Free	Abrir
25 Days of Cyber Security	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 1 [2019]	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2 [2020]	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2022	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2023	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2024	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Abrir
Anonforce	EASY	Challenge	🟢 Free	Abrir
Atlassian CVE-2022-26134	EASY	Walkthrough	🟢 Free	Abrir
AWS Basic Concepts	EASY	Walkthrough	🟢 Free	Abrir
Badbyte	EASY	Walkthrough	🟢 Free	Abrir
Basic Pentesting	EASY	Challenge	🟢 Free	Abrir
Bolt	EASY	Walkthrough	🟢 Free	Abrir
Broken Access Control	EASY	Walkthrough	🟢 Free	Abrir
Cloud Security Pitfalls	EASY	Walkthrough	🟢 Free	Abrir
Common Attacks	EASY	Walkthrough	🟢 Free	Abrir
Cyborg	EASY	Challenge	🟢 Free	Abrir
Enumeration & Brute Force	EASY	Walkthrough	🟢 Free	Abrir
Exploit Vulnerabilities	EASY	Walkthrough	🔵 VIP	Abrir
Fowsniff CTF	EASY	Challenge	🟢 Free	Abrir
Google Dorking	EASY	Walkthrough	🟢 Free	Abrir
h4cked	EASY	Challenge	🟢 Free	Abrir
How Websites Work	EASY	Walkthrough	🟢 Free	Abrir
Hydra	EASY	Walkthrough	🟢 Free	Abrir
Ice	EASY	Walkthrough	🟢 Free	Abrir
Intro PoC Scripting	EASY	Walkthrough	🟢 Free	Abrir
Intro to Logs	EASY	Walkthrough	🟢 Free	Abrir
Intro to SSRF	EASY	Walkthrough	🔵 VIP	Abrir
Introduction to CryptOps	EASY	Walkthrough	🟢 Free	Abrir
Introduction to OWASP ZAP	EASY	Walkthrough	🟢 Free	Abrir
JPGChat	EASY	Challenge	🟢 Free	Abrir
Jupyter 101	EASY	Walkthrough	🟢 Free	Abrir
kiba	EASY	Challenge	🟢 Free	Abrir
Learn Rust	EASY	Walkthrough	🟢 Free	Abrir
Linux Logging for SOC	EASY	Walkthrough	🟢 Free	Abrir
Linux Strength Training	EASY	Walkthrough	🟢 Free	Abrir
MS Sentinel: Deploy	EASY	Walkthrough	🔵 VIP	Abrir
MS Sentinel: Detect	EASY	Walkthrough	🔵 VIP	Abrir
MS Sentinel: Ingest Data	EASY	Walkthrough	🔵 VIP	Abrir
MS Sentinel: Just Looking	EASY	Challenge	🔵 VIP	Abrir
Network Security Essentials	EASY	Walkthrough	🟢 Free	Abrir
OhSINT	EASY	Challenge	🟢 Free	Abrir
Overpass	EASY	Challenge	🟢 Free	Abrir
OWASP Juice Shop	EASY	Walkthrough	🟢 Free	Abrir
OWASP Mutillidae II	EASY	Walkthrough	🟢 Free	Abrir
OWASP Top 10 2025: IAAA Failures	EASY	Walkthrough	🟢 Free	Abrir
Pentesting Fundamentals	EASY	Walkthrough	🟢 Free	Abrir
Phishing Analysis Fundamentals	EASY	Walkthrough	🟢 Free	Abrir

Mostrando 50 de 103. El catálogo completo tiene el resto.

Skills relacionadas

← Volver al glosario completo Última actualización: 2026-08-17

​Por dónde empezar

​Recursos curados

​Máquinas HTB que practican Remote Code Execution (RCE) (104)

​Labs PortSwigger que practican Remote Code Execution (RCE) (15)

​Rooms TryHackMe que practican Remote Code Execution (RCE) (103)

​Skills relacionadas