GuardianLeaks on pentest-ground.com — Web App Pentest Walkthrough
Step-by-step web-app pentest of GuardianLeaks — SQLi to a full credential dump, SSRF into cloud metadata, an easy-to-miss stored XSS, and an exposed Werkzeug...
Pentest
// Penetration Testing — All Walkthroughs
// Web Application
DVGA on pentest-ground.com — GraphQL Pentest Walkthrough
Step-by-step: unauthenticated GraphQL introspection to full RCE on DVGA — 2 criticals, one HIGH SSRF, full kill chain.
pentest-ground.com — Web App Pentest Walkthrough
Step-by-step: SQLi, Werkzeug RCE and Broken Access Control on a Flask app — 3 criticals, full kill chain.
DVWA Full Web Assessment — pentest-ground.com
Full BlackOps web assessment of DVWA running on pentest-ground.com:4280. 20 confirmed findings across RCE, LFI/RFI, SQLi, XSS, CSRF, and broken access contro...
// Network / Infrastructure
Hack Weak Telnet Services: The Dangerous Reality of Weak Telnet Configurations
An open, unauthenticated Telnet service handing out a root shell with no password prompt at all.