GuardianLeaks on pentest-ground.com — Web App Pentest Walkthrough
Step-by-step web-app pentest of GuardianLeaks — SQLi to a full credential dump, SSRF into cloud metadata, an easy-to-miss stored XSS, and an exposed Werkzeug...
Info Sec
// All Articles
// Pentest — Web Application
DVGA on pentest-ground.com — GraphQL Pentest Walkthrough
Step-by-step: unauthenticated GraphQL introspection to full RCE on DVGA — 2 criticals, one HIGH SSRF, full kill chain.
pentest-ground.com — Web App Pentest Walkthrough
Step-by-step: SQLi, Werkzeug RCE and Broken Access Control on a Flask app — 3 criticals, full kill chain.
DVWA Full Web Assessment — pentest-ground.com
Full BlackOps web assessment of DVWA running on pentest-ground.com:4280. 20 confirmed findings across RCE, LFI/RFI, SQLi, XSS, CSRF, and broken access contro...
// Pentest — Network / Infrastructure
Hack Weak Telnet Services: The Dangerous Reality of Weak Telnet Configurations
An open, unauthenticated Telnet service handing out a root shell with no password prompt at all.
// Vulnerability Assessment
GuardianLeaks on pentest-ground.com — Web App Pentest Walkthrough
Step-by-step web-app pentest of GuardianLeaks — SQLi to a full credential dump, SSRF into cloud metadata, an easy-to-miss stored XSS, and an exposed Werkzeug...
DVGA on pentest-ground.com — GraphQL Pentest Walkthrough
Step-by-step: unauthenticated GraphQL introspection to full RCE on DVGA — 2 criticals, one HIGH SSRF, full kill chain.
Welcome to SweshInfoSec
Security research walkthroughs, VAPT findings, and bug bounty reports — documented with BlackOps.
pentest-ground.com — Web App Pentest Walkthrough
Step-by-step: SQLi, Werkzeug RCE and Broken Access Control on a Flask app — 3 criticals, full kill chain.
DVWA Full Web Assessment — pentest-ground.com
Full BlackOps web assessment of DVWA running on pentest-ground.com:4280. 20 confirmed findings across RCE, LFI/RFI, SQLi, XSS, CSRF, and broken access contro...