Bharath Narayanasamy

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks AD² · Attack. Detect. Defend. XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks Same root cause — untrusted input crossing a boundary something else…

Bharath Narayanasamy VM, XSS, SSRF

Wazuh SIEM & XDR DETECT EDR | SIEM | SOAR

Importing the Wazuh 5.0 Beta OVA into Proxmox

Wazuh 5.0 is currently in beta, and the project also ships it as a ready-to-run OVA appliance. That's convenient if you just want to kick the tyres on the new release, but Proxmox doesn't import OVAs…

Bharath Narayanasamy SIEM, wazuh, EDR, XDR

LEARNING PATHS Wazuh SIEM & XDR DETECT

Exploring Wazuh: Introduction

Introduction The Wazuh Agent At the heart of every monitored endpoint sits the Wazuh agent — a lightweight, cross-platform component that acts as your eyes and ears on the systems you care about. Once deployed, it…

Bharath Narayanasamy wazuh

GRC NIS2 | CyFUN

NIS2: A Complete Article-by-Article Reference

NIS2 Directive: Complete Article-by-Article Guide — TheCyberMatrix TheCyberMatrix GRC & Compliance EU Directive 2022/2555 NIS2: A CompleteArticle-by-Article Guide Category: Regulatory Compliance Coverage: All 46 Articles Applies to: Essential & Important Entities across the EU Effective: October…

Bharath Narayanasamy NIS2

PenTest ATTACK LEARNING PATHS

Metasploit: Quick Reference Sheet

Metasploit / msfvenom / Meterpreter Cheat Sheet // Metasploit Framework Cheat Sheet msfconsole, msfvenom payload generation, and Meterpreter post-exploitation reference for adversary simulation, purple team exercises, and detection engineering. Commands mapped to MITRE ATT&CK where applicable.…

Bharath Narayanasamy msfvenom, meterpreter, Metasploit

RED TEAM

HAVOC C2: COMMAND & CONTROL FRAMEWORK [PART – I]

A deep-dive into deploying and operating Havoc — the modern, open-source post-exploitation C2 framework built for red teams and purple team simulation labs. From installation and team server configuration to listener setup, payload generation, and agent…

Bharath Narayanasamy red-team, c2, Havoc C2

SOC Analyst Threat Detection and Incident Response Traffic Analysis

Wireshark Threat Hunting – From Packets to Indicators [HTTP: DEEP-DIVE]

HTTP/HTTP2 Deep-Dive — Wireshark DFIR // HTTP / HTTP2 — Deep-Dive Filter Reference Granular Wireshark display filters for HTTP/1.1 and HTTP/2 — request methods, path & file access, credential extraction, brute force detection, SQL injection, XSS,…

Bharath Narayanasamy wireshark

RED TEAM

SETUP DVWA ON WINDOWS

Introduction to DVWA Damn Vulnerable Web Application (DVWA) is one of the most widely used platforms for learning and practicing web application security testing. As the name suggests, it is a deliberately vulnerable web application designed…

Bharath Narayanasamy DVWA

Threat Detection and Incident Response Traffic Analysis DFIR

Wireshark Threat Hunting – From Packets to Indicators [SMB: DEEP-DIVE]

SMB & Windows Auth Deep-Dive — Wireshark DFIR // SMB & Windows Auth — Deep-Dive Filter Reference Granular Wireshark display filters for SMB2 file & share access (paths, users, operations, error codes), NTLM authentication flow, Kerberos…

Bharath Narayanasamy

SOC Analyst Threat Detection and Incident Response Traffic Analysis

Wireshark Threat Hunting – From Packets to Indicators

Wireshark DFIR Cheat Sheet // Wireshark DFIR Cheat Sheet Display filters, detection techniques, traffic analysis workflows, and TShark CLI commands for Digital Forensics & Incident Response. Filters are mapped to MITRE ATT&CK where applicable. Wireshark 4.x…

Bharath Narayanasamy wireshark