ATTACK – NetwerkLABS

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks AD² · Attack. Detect. Defend. XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks Same root cause — untrusted input crossing a boundary something else…

Bharath Narayanasamy VM, XSS, SSRF

PenTest ATTACK LEARNING PATHS

Metasploit: Quick Reference Sheet

Metasploit / msfvenom / Meterpreter Cheat Sheet // Metasploit Framework Cheat Sheet msfconsole, msfvenom payload generation, and Meterpreter post-exploitation reference for adversary simulation, purple team exercises, and detection engineering. Commands mapped to MITRE ATT&CK where applicable.…

Bharath Narayanasamy msfvenom, meterpreter, Metasploit

VulnLAB RED TEAM Purple Teaming

Nmap Cheat Sheet

Nmap Cheat Sheet nmap — cheat sheet Network Mapper · Comprehensive Command Reference 🎯 Target Specification 8 nmap 192.168.1.1·Scan a single IP nmap 192.168.1.1-254·Scan IP range nmap 192.168.1.0/24·Scan CIDR subnet nmap 10.0.0.1 10.0.0.2·Scan multiple IPs nmap…

Bharath Narayanasamy

VulnLAB

Metasploit Framework (MSFconsole) Cheatsheet

Disclaimer: This post is created solely for educational and research purposes. The techniques, tools, and concepts discussed are intended to enhance cybersecurity awareness and skills by demonstrating how offensive security testing works. Unauthorized access to computer…

Bharath Narayanasamy

VulnLAB

OpenCTI – Open Source Threat Intelligence Platform: PART I

OpenCTI (Open Cyber Threat Intelligence Platform) is a powerful open-source solution designed to help security teams collect, store, organize, and visualize threat intelligence in a structured way. Whether you’re a SOC analyst, threat hunter, or security…

Bharath Narayanasamy Threat Intel, threat_detection, OpenCTI

VulnLAB

TryHackMe: PyRAT

Pyrat is an easy-rated TryHackMe machine that simulates a running Python RAT on an open socket. The challenge involves leaking a GitHub account to gain access to the PyRat source code, which helps in understanding how the RAT operates and gain root access. Room Description:…

Bharath Narayanasamy tryhackme

Practical LABS

Install Docker on ParrotOS

Docker Setup on ParrotOS 6.3 In this tutorial, we’ll walk you through a foolproof, up-to-date method for getting Docker up and running on the latest release of Parrot OS (March, 2025).Because there's no official release from Parrot…

Bharath Narayanasamy Docker

GRC SOC Analyst BLUE TEAM

Vulnerability Management: FARADAY

Faraday: Open Source Vulnerability Manager Faraday is a powerful open-source vulnerability management platform designed to help cybersecurity teams streamline their pentesting, vulnerability assessment, and remediation processes. Built with a collaborative and automation-driven approach, Faraday enables security…

Bharath Narayanasamy vuln, faraday

Attacking Active Directory Active Directory

Active Directory Domain Service (AD DS)

Overview AD DS acts as a catalog for all objects in a network (users, groups, machines, printers, etc.). Some objects, such as users and machines, are security principals, meaning they can be authenticated and assigned privileges.…

Bharath Narayanasamy AD attacks

Metasploit PenTest

Metasploit Cheat Sheet

MSFconsole Commands CommandDescriptionshow exploitsShow all exploits within the Framework.show payloadsShow all payloads within the Framework.grep meterpreter show payloadsgrep meterpreter grep reverse_tcp show payloadsMSF - Searching for Specific Payloadshow auxiliaryShow all auxiliary modules within the Framework.search <name>Search…

Bharath Narayanasamy msfconsole, Metasploit