> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Remote Code Execution (RCE)

> Recursos cross-platform para Remote Code Execution (RCE): máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

# Remote Code Execution (RCE)

Esta página agrega los **recursos para practicar Remote Code Execution (RCE)** de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

## Recursos curados

| Fuente     | Enlace                                                                                                                                         |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks | [https://book.hacktricks.wiki/en/pentesting-web/command-injection.html](https://book.hacktricks.wiki/en/pentesting-web/command-injection.html) |

## Máquinas HTB que practican Remote Code Execution (RCE) (104)

| Máquina                                                    | SO      | Dificultad                                           |
| ---------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [AdmirerToo](/htb/machines/linux/dificil/admirertoo)       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Altered](/htb/machines/linux/dificil/altered)             | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Anubis](/htb/machines/windows/insano/anubis)              | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Apocalyst](/htb/machines/linux/medio/apocalyst)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Atom](/htb/machines/windows/medio/atom)                   | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Backdoor](/htb/machines/linux/facil/backdoor)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Backend](/htb/machines/linux/medio/backend)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [BackendTwo](/htb/machines/linux/medio/backendtwo)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Bank](/htb/machines/linux/facil/bank)                     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Bankrobber](/htb/machines/windows/insano/bankrobber)      | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Bart](/htb/machines/windows/medio/bart)                   | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Bastard](/htb/machines/windows/medio/bastard)             | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Beep](/htb/machines/linux/facil/beep)                     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Blackfield](/htb/machines/windows/dificil/blackfield)     | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Buff](/htb/machines/windows/facil/buff)                   | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Cache](/htb/machines/linux/medio/cache)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Catch](/htb/machines/linux/medio/catch)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Celestial](/htb/machines/linux/medio/celestial)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Chaos](/htb/machines/linux/medio/chaos)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Conceal](/htb/machines/windows/dificil/conceal)           | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Control](/htb/machines/windows/dificil/control)           | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [CrimeStoppers](/htb/machines/linux/dificil/crimestoppers) | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [CrossFit](/htb/machines/linux/insano/crossfit)            | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [CTF](/htb/machines/linux/insano/ctf)                      | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Curling](/htb/machines/windows/facil/curling)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Dab](/htb/machines/linux/dificil/dab)                     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Devzat](/htb/machines/linux/medio/devzat)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Doctor](/htb/machines/linux/facil/doctor)                 | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Ellingson](/htb/machines/linux/dificil/ellingson)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Epsilon](/htb/machines/linux/medio/epsilon)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Europa](/htb/machines/linux/medio/europa)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Feline](/htb/machines/linux/dificil/feline)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Fighter](/htb/machines/windows/insano/fighter)            | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Flujab](/htb/machines/linux/dificil/flujab)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Flustered](/htb/machines/linux/medio/flustered)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Frolic](/htb/machines/linux/facil/frolic)                 | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Fulcrum](/htb/machines/linux/insano/fulcrum)              | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Grandpa](/htb/machines/windows/facil/grandpa)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Granny](/htb/machines/windows/facil/granny)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Hackback](/htb/machines/windows/insano/hackback)          | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Hancliffe](/htb/machines/windows/dificil/hancliffe)       | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Hawk](/htb/machines/linux/medio/hawk)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Helpline](/htb/machines/windows/dificil/helpline)         | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Holiday](/htb/machines/linux/dificil/holiday)             | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Intelligence](/htb/machines/windows/medio/intelligence)   | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Jewel](/htb/machines/linux/medio/jewel)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Joker](/htb/machines/linux/dificil/joker)                 | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Json](/htb/machines/windows/medio/json)                   | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Knife](/htb/machines/linux/facil/knife)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Laboratory](/htb/machines/linux/facil/laboratory)         | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Meta](/htb/machines/linux/medio/meta)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Monitors](/htb/machines/linux/dificil/monitors)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Monteverde](/htb/machines/windows/medio/monteverde)       | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [MultiMaster](/htb/machines/windows/insano/multimaster)    | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Netmon](/htb/machines/windows/facil/netmon)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Nibbles](/htb/machines/linux/facil/nibbles)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Nightmare](/htb/machines/linux/insano/nightmare)          | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Nineveh](/htb/machines/linux/medio/nineveh)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Noter](/htb/machines/linux/medio/noter)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Object](/htb/machines/windows/dificil/object)             | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Obscurity](/htb/machines/linux/medio/obscurity)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Oouch](/htb/machines/linux/dificil/oouch)                 | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [OpenSource](/htb/machines/linux/facil/opensource)         | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Optimum](/htb/machines/windows/facil/optimum)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Overflow](/htb/machines/linux/dificil/overflow)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [OverGraph](/htb/machines/linux/dificil/overgraph)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Oz](/htb/machines/linux/dificil/oz)                       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Pandora](/htb/machines/linux/facil/pandora)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Pit](/htb/machines/linux/medio/pit)                       | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Player](/htb/machines/linux/dificil/player)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Poison](/htb/machines/linux/medio/poison)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Quick](/htb/machines/linux/dificil/quick)                 | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [RE](/htb/machines/windows/dificil/re)                     | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [RedCross](/htb/machines/linux/medio/redcross)             | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Reel](/htb/machines/windows/dificil/reel)                 | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Reel2](/htb/machines/windows/dificil/reel2)               | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [Remote](/htb/machines/windows/facil/remote)               | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [RouterSpace](/htb/machines/linux/facil/routerspace)       | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Schooled](/htb/machines/linux/medio/schooled)             | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Scrambled](/htb/machines/windows/medio/scrambled)         | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [ScriptKiddie](/htb/machines/linux/facil/scriptkiddie)     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Seal](/htb/machines/linux/medio/seal)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Sense](/htb/machines/linux/facil/sense)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Shibboleth](/htb/machines/linux/medio/shibboleth)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Sniper](/htb/machines/windows/medio/sniper)               | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Stacked](/htb/machines/linux/insano/stacked)              | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Static](/htb/machines/linux/dificil/static)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [StreamIO](/htb/machines/windows/medio/streamio)           | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [SwagShop](/htb/machines/linux/facil/swagshop)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Talkative](/htb/machines/linux/dificil/talkative)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Tally](/htb/machines/windows/dificil/tally)               | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [TartarSauce](/htb/machines/linux/medio/tartarsauce)       | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Teacher](/htb/machines/linux/facil/teacher)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Time](/htb/machines/linux/medio/time)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Toolbox](/htb/machines/windows/facil/toolbox)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Travel](/htb/machines/linux/dificil/travel)               | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Unbalanced](/htb/machines/linux/dificil/unbalanced)       | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Undetected](/htb/machines/linux/medio/undetected)         | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Union](/htb/machines/linux/medio/union)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Unobtainium](/htb/machines/linux/dificil/unobtainium)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Validation](/htb/machines/linux/facil/validation)         | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Wall](/htb/machines/linux/medio/wall)                     | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Worker](/htb/machines/windows/medio/worker)               | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Zetta](/htb/machines/linux/dificil/zetta)                 | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |

## Labs PortSwigger que practican Remote Code Execution (RCE) (15)

| Lab                                                                                                                                                                               | Dificultad                                                 | Topic                          | Oficial                                                                                                                                        |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- | ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
| [2FA bypass using a brute-force attack](/portswigger/labs/authentication/multi-factor-2fa-bypass-using-a-brute-force-attack)                                                      | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Authentication Vulnerabilities | [Abrir](https://portswigger.net/web-security/authentication/multi-factor/lab-2fa-bypass-using-a-brute-force-attack)                            |
| [Broken brute-force protection, multiple credentials per request](/portswigger/labs/authentication/password-based-broken-brute-force-protection-multiple-credentials-per-request) | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Authentication Vulnerabilities | [Abrir](https://portswigger.net/web-security/authentication/password-based/lab-broken-brute-force-protection-multiple-credentials-per-request) |
| [DOM XSS in document.write sink using source location.search](/portswigger/labs/cross-site-scripting/dom-based-document-write-sink)                                               | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Cross-Site Scripting (XSS)     | [Abrir](https://portswigger.net/web-security/cross-site-scripting/dom-based/lab-document-write-sink)                                           |
| [DOM XSS in innerHTML sink using source location.search](/portswigger/labs/cross-site-scripting/dom-based-innerhtml-sink)                                                         | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Cross-Site Scripting (XSS)     | [Abrir](https://portswigger.net/web-security/cross-site-scripting/dom-based/lab-innerhtml-sink)                                                |
| [DOM XSS in jQuery anchor href attribute sink using location.search source](/portswigger/labs/cross-site-scripting/dom-based-jquery-href-attribute-sink)                          | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Cross-Site Scripting (XSS)     | [Abrir](https://portswigger.net/web-security/cross-site-scripting/dom-based/lab-jquery-href-attribute-sink)                                    |
| [Flawed enforcement of business rules](/portswigger/labs/logic-flaws/examples-logic-flaws-flawed-enforcement-of-business-rules)                                                   | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Business Logic Vulnerabilities | [Abrir](https://portswigger.net/web-security/logic-flaws/examples/lab-logic-flaws-flawed-enforcement-of-business-rules)                        |
| [Remote code execution via web shell upload](/portswigger/labs/file-upload/file-upload-remote-code-execution-via-web-shell-upload)                                                | <span className="dbadge dbadge-easy">APPRENTICE</span>     | File Upload Vulnerabilities    | [Abrir](https://portswigger.net/web-security/file-upload/lab-file-upload-remote-code-execution-via-web-shell-upload)                           |
| [Source code disclosure via backup files](/portswigger/labs/information-disclosure/exploiting-infoleak-via-backup-files)                                                          | <span className="dbadge dbadge-easy">APPRENTICE</span>     | Information Disclosure         | [Abrir](https://portswigger.net/web-security/information-disclosure/exploiting/lab-infoleak-via-backup-files)                                  |
| [Broken brute-force protection, IP block](/portswigger/labs/authentication/password-based-broken-bruteforce-protection-ip-block)                                                  | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Authentication Vulnerabilities | [Abrir](https://portswigger.net/web-security/authentication/password-based/lab-broken-bruteforce-protection-ip-block)                          |
| [Bypassing GraphQL brute force protections](/portswigger/labs/graphql/graphql-brute-force-protection-bypass)                                                                      | <span className="dbadge dbadge-medium">PRACTITIONER</span> | GraphQL                        | [Abrir](https://portswigger.net/web-security/graphql/lab-graphql-brute-force-protection-bypass)                                                |
| [DOM XSS in document.write sink using source location.search inside a select element](/portswigger/labs/cross-site-scripting/dom-based-document-write-sink-inside-select-element) | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Cross-Site Scripting (XSS)     | [Abrir](https://portswigger.net/web-security/cross-site-scripting/dom-based/lab-document-write-sink-inside-select-element)                     |
| [Forced OAuth profile linking](/portswigger/labs/oauth/oauth-forced-oauth-profile-linking)                                                                                        | <span className="dbadge dbadge-medium">PRACTITIONER</span> | OAuth Authentication           | [Abrir](https://portswigger.net/web-security/oauth/lab-oauth-forced-oauth-profile-linking)                                                     |
| [Password brute-force via password change](/portswigger/labs/authentication/other-mechanisms-password-brute-force-via-password-change)                                            | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Authentication Vulnerabilities | [Abrir](https://portswigger.net/web-security/authentication/other-mechanisms/lab-password-brute-force-via-password-change)                     |
| [Remote code execution via polyglot web shell upload](/portswigger/labs/file-upload/file-upload-remote-code-execution-via-polyglot-web-shell-upload)                              | <span className="dbadge dbadge-medium">PRACTITIONER</span> | File Upload Vulnerabilities    | [Abrir](https://portswigger.net/web-security/file-upload/lab-file-upload-remote-code-execution-via-polyglot-web-shell-upload)                  |
| [Remote code execution via server-side prototype pollution](/portswigger/labs/prototype-pollution/server-side-remote-code-execution-via-server-side-prototype-pollution)          | <span className="dbadge dbadge-medium">PRACTITIONER</span> | Prototype Pollution            | [Abrir](https://portswigger.net/web-security/prototype-pollution/server-side/lab-remote-code-execution-via-server-side-prototype-pollution)    |

## Rooms TryHackMe que practican Remote Code Execution (RCE) (103)

| Room                                                                      | Dificultad                                       | Tipo        | Acceso  | Oficial                                                        |
| ------------------------------------------------------------------------- | ------------------------------------------------ | ----------- | ------- | -------------------------------------------------------------- |
| [History of Malware](/tryhackme/rooms/historyofmalware)                   | <span className="dbadge dbadge-easy">INFO</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/historyofmalware)           |
| [OverlayFS - CVE-2021-3493](/tryhackme/rooms/overlayfs)                   | <span className="dbadge dbadge-easy">INFO</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/overlayfs)                  |
| [25 Days of Cyber Security](/tryhackme/rooms/learncyberin25days)          | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/learncyberin25days)         |
| [Advent of Cyber 1 \[2019\]](/tryhackme/rooms/25daysofchristmas)          | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/25daysofchristmas)          |
| [Advent of Cyber 2 \[2020\]](/tryhackme/rooms/adventofcyber2)             | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber2)             |
| [Advent of Cyber 2022](/tryhackme/rooms/adventofcyber4)                   | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber4)             |
| [Advent of Cyber 2023](/tryhackme/rooms/adventofcyber2023)                | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber2023)          |
| [Advent of Cyber 2024](/tryhackme/rooms/adventofcyber2024)                | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber2024)          |
| [Advent of Cyber 3 (2021)](/tryhackme/rooms/adventofcyber3)               | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/adventofcyber3)             |
| [Anonforce](/tryhackme/rooms/bsidesgtanonforce)                           | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/bsidesgtanonforce)          |
| [Atlassian CVE-2022-26134](/tryhackme/rooms/cve202226134)                 | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/cve202226134)               |
| [AWS Basic Concepts](/tryhackme/rooms/awsbasicconcepts)                   | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/awsbasicconcepts)           |
| [Badbyte](/tryhackme/rooms/badbyte)                                       | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/badbyte)                    |
| [Basic Pentesting](/tryhackme/rooms/basicpentestingjt)                    | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/basicpentestingjt)          |
| [Bolt](/tryhackme/rooms/bolt)                                             | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/bolt)                       |
| [Broken Access Control](/tryhackme/rooms/owaspbrokenaccesscontrol)        | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/owaspbrokenaccesscontrol)   |
| [Cloud Security Pitfalls](/tryhackme/rooms/cloudsecuritypitfalls)         | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/cloudsecuritypitfalls)      |
| [Common Attacks](/tryhackme/rooms/commonattacks)                          | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/commonattacks)              |
| [Cyborg](/tryhackme/rooms/cyborgt8)                                       | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/cyborgt8)                   |
| [Enumeration & Brute Force](/tryhackme/rooms/enumerationbruteforce)       | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/enumerationbruteforce)      |
| [Exploit Vulnerabilities](/tryhackme/rooms/exploitingavulnerabilityv2)    | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/exploitingavulnerabilityv2) |
| [Fowsniff CTF](/tryhackme/rooms/ctf)                                      | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/ctf)                        |
| [Google Dorking](/tryhackme/rooms/googledorking)                          | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/googledorking)              |
| [h4cked](/tryhackme/rooms/h4cked)                                         | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/h4cked)                     |
| [How Websites Work](/tryhackme/rooms/howwebsiteswork)                     | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/howwebsiteswork)            |
| [Hydra](/tryhackme/rooms/hydra)                                           | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/hydra)                      |
| [Ice](/tryhackme/rooms/ice)                                               | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/ice)                        |
| [Intro PoC Scripting](/tryhackme/rooms/intropocscripting)                 | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/intropocscripting)          |
| [Intro to Logs](/tryhackme/rooms/introtologs)                             | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/introtologs)                |
| [Intro to SSRF](/tryhackme/rooms/ssrfqi)                                  | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/ssrfqi)                     |
| [Introduction to CryptOps](/tryhackme/rooms/introductiontocryptops)       | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/introductiontocryptops)     |
| [Introduction to OWASP ZAP](/tryhackme/rooms/learnowaspzap)               | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/learnowaspzap)              |
| [JPGChat](/tryhackme/rooms/jpgchat)                                       | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/jpgchat)                    |
| [Jupyter 101](/tryhackme/rooms/jupyter101)                                | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/jupyter101)                 |
| [kiba](/tryhackme/rooms/kiba)                                             | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/kiba)                       |
| [Learn Rust](/tryhackme/rooms/rust)                                       | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/rust)                       |
| [Linux Logging for SOC](/tryhackme/rooms/linuxloggingforsoc)              | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/linuxloggingforsoc)         |
| [Linux Strength Training](/tryhackme/rooms/linuxstrengthtraining)         | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/linuxstrengthtraining)      |
| [MS Sentinel: Deploy](/tryhackme/rooms/sentineldeploy)                    | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/sentineldeploy)             |
| [MS Sentinel: Detect](/tryhackme/rooms/sentineldetect)                    | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/sentineldetect)             |
| [MS Sentinel: Ingest Data](/tryhackme/rooms/sentinelingestdata)           | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🔵 VIP  | [Abrir](https://tryhackme.com/room/sentinelingestdata)         |
| [MS Sentinel: Just Looking](/tryhackme/rooms/justlooking)                 | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🔵 VIP  | [Abrir](https://tryhackme.com/room/justlooking)                |
| [Network Security Essentials](/tryhackme/rooms/networksecurityessentials) | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/networksecurityessentials)  |
| [OhSINT](/tryhackme/rooms/ohsint)                                         | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/ohsint)                     |
| [Overpass](/tryhackme/rooms/overpass)                                     | <span className="dbadge dbadge-easy">EASY</span> | Challenge   | 🟢 Free | [Abrir](https://tryhackme.com/room/overpass)                   |
| [OWASP Juice Shop](/tryhackme/rooms/owaspjuiceshop)                       | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/owaspjuiceshop)             |
| [OWASP Mutillidae II](/tryhackme/rooms/owaspmutillidae)                   | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/owaspmutillidae)            |
| [OWASP Top 10 2025: IAAA Failures](/tryhackme/rooms/owasptopten2025one)   | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/owasptopten2025one)         |
| [Pentesting Fundamentals](/tryhackme/rooms/pentestingfundamentals)        | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/pentestingfundamentals)     |
| [Phishing Analysis Fundamentals](/tryhackme/rooms/phishingemails1tryoe)   | <span className="dbadge dbadge-easy">EASY</span> | Walkthrough | 🟢 Free | [Abrir](https://tryhackme.com/room/phishingemails1tryoe)       |

*Mostrando 50 de 103. El [catálogo completo](/tryhackme/all) tiene el resto.*

## Skills relacionadas

* [/skills/lfi](/skills/lfi)
* [/skills/rfi](/skills/rfi)
* [/skills/shellshock](/skills/shellshock)

***

← [Volver al glosario completo](/glosario)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Remote Code Execution (RCE)","termCode":"rce","inLanguage":"es","url":"https://rootea.es/skills/rce","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Glosario táctico de pentesting","url":"https://rootea.es/glosario"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"Máquinas HTB que practican Remote Code Execution (RCE)","numberOfItems":104,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/htb/machines/linux/dificil/admirertoo","name":"AdmirerToo"},{"@type":"ListItem","position":2,"url":"https://rootea.es/htb/machines/linux/dificil/altered","name":"Altered"},{"@type":"ListItem","position":3,"url":"https://rootea.es/htb/machines/windows/insano/anubis","name":"Anubis"},{"@type":"ListItem","position":4,"url":"https://rootea.es/htb/machines/linux/medio/apocalyst","name":"Apocalyst"},{"@type":"ListItem","position":5,"url":"https://rootea.es/htb/machines/windows/medio/atom","name":"Atom"},{"@type":"ListItem","position":6,"url":"https://rootea.es/htb/machines/linux/facil/backdoor","name":"Backdoor"},{"@type":"ListItem","position":7,"url":"https://rootea.es/htb/machines/linux/medio/backend","name":"Backend"},{"@type":"ListItem","position":8,"url":"https://rootea.es/htb/machines/linux/medio/backendtwo","name":"BackendTwo"},{"@type":"ListItem","position":9,"url":"https://rootea.es/htb/machines/linux/facil/bank","name":"Bank"},{"@type":"ListItem","position":10,"url":"https://rootea.es/htb/machines/windows/insano/bankrobber","name":"Bankrobber"},{"@type":"ListItem","position":11,"url":"https://rootea.es/htb/machines/windows/medio/bart","name":"Bart"},{"@type":"ListItem","position":12,"url":"https://rootea.es/htb/machines/windows/medio/bastard","name":"Bastard"},{"@type":"ListItem","position":13,"url":"https://rootea.es/htb/machines/linux/facil/beep","name":"Beep"},{"@type":"ListItem","position":14,"url":"https://rootea.es/htb/machines/windows/dificil/blackfield","name":"Blackfield"},{"@type":"ListItem","position":15,"url":"https://rootea.es/htb/machines/windows/facil/buff","name":"Buff"},{"@type":"ListItem","position":16,"url":"https://rootea.es/htb/machines/linux/medio/cache","name":"Cache"},{"@type":"ListItem","position":17,"url":"https://rootea.es/htb/machines/linux/medio/catch","name":"Catch"},{"@type":"ListItem","position":18,"url":"https://rootea.es/htb/machines/linux/medio/celestial","name":"Celestial"},{"@type":"ListItem","position":19,"url":"https://rootea.es/htb/machines/linux/medio/chaos","name":"Chaos"},{"@type":"ListItem","position":20,"url":"https://rootea.es/htb/machines/windows/dificil/conceal","name":"Conceal"},{"@type":"ListItem","position":21,"url":"https://rootea.es/htb/machines/windows/dificil/control","name":"Control"},{"@type":"ListItem","position":22,"url":"https://rootea.es/htb/machines/linux/dificil/crimestoppers","name":"CrimeStoppers"},{"@type":"ListItem","position":23,"url":"https://rootea.es/htb/machines/linux/insano/crossfit","name":"CrossFit"},{"@type":"ListItem","position":24,"url":"https://rootea.es/htb/machines/linux/insano/ctf","name":"CTF"},{"@type":"ListItem","position":25,"url":"https://rootea.es/htb/machines/windows/facil/curling","name":"Curling"}]}`}
</script>

*Última actualización: 2026-05-09*