Info Sec

// All Articles

// Pentest — Web Application

GuardianLeaks on pentest-ground.com — Web App Pentest Walkthrough

August 30, 2026 6 minute read

Step-by-step web-app pentest of GuardianLeaks — SQLi to a full credential dump, SSRF into cloud metadata, an easy-to-miss stored XSS, and an exposed Werkzeug...

DVGA on pentest-ground.com — GraphQL Pentest Walkthrough

August 29, 2026 9 minute read

Step-by-step: unauthenticated GraphQL introspection to full RCE on DVGA — 2 criticals, one HIGH SSRF, full kill chain.

pentest-ground.com — Web App Pentest Walkthrough

May 10, 2026 7 minute read

Step-by-step: SQLi, Werkzeug RCE and Broken Access Control on a Flask app — 3 criticals, full kill chain.

DVWA Full Web Assessment — pentest-ground.com

May 5, 2026 11 minute read

Full BlackOps web assessment of DVWA running on pentest-ground.com:4280. 20 confirmed findings across RCE, LFI/RFI, SQLi, XSS, CSRF, and broken access contro...

Test

May 14, 2026 less than 1 minute read

Test Sub

Welcome to SweshInfoSec

May 13, 2026 less than 1 minute read

Security research walkthroughs, VAPT findings, and bug bounty reports — documented with BlackOps.