Skip to main content
This page aggregates cross-platform resources to practice Information Leakage: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills. Coverage: 80 challenges across 2 platforms β€” 74 HackTheBox Β· 6 PortSwigger. 73 with a Spanish writeup, 74 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.
  1. PortSwigger β€” Authentication bypass via information disclosure (Apprentice) Β· πŸ‡¬πŸ‡§
  2. PortSwigger β€” Information disclosure in error messages (Apprentice) Β· πŸ‡¬πŸ‡§
  3. PortSwigger β€” Information disclosure on debug page (Apprentice) Β· πŸ‡¬πŸ‡§
  4. PortSwigger β€” Source code disclosure via backup files (Apprentice) Β· πŸ‡¬πŸ‡§
  5. HackTheBox β€” Admirer (FΓ‘cil) Β· πŸ‡ͺπŸ‡Έ πŸ‡¬πŸ‡§ πŸ“Ή
  6. HackTheBox β€” Bank (FΓ‘cil) Β· πŸ‡ͺπŸ‡Έ πŸ‡¬πŸ‡§ πŸ“Ή

Curated resources

HTB machines practicing Information Leakage (74)

PortSwigger labs practicing Information Leakage (6)


← Back to the full glossary Last updated: 2026-11-02