NetwerkLABS

CyFUN Implementation: A Practical Roadmap

Framework basis: CyberFundamentals (CyFUN) — aligned with NIST CSF and NIS2 objectivesDuration: ~9–12 months initial cycle (Depends on Organizations)Approach: Risk-based, phased rollout with evidence collection from day one 🔹 Phase 1 — Initiation & Scoping ObjectiveKey…

Bharath Narayanasamy CyFUN, NIS2

Web Pentest

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks AD² · Attack. Detect. Defend. XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks Same root cause — untrusted input crossing a boundary something else…

Bharath Narayanasamy VM, XSS, SSRF

EDR | SIEM | SOAR LEARNING PATHS Wazuh SIEM & XDR

Importing the Wazuh 5.0 Beta OVA into Proxmox

Wazuh 5.0 is currently in beta, and the project also ships it as a ready-to-run OVA appliance. That's convenient if you just want to kick the tyres on the new release, but Proxmox doesn't import OVAs…

Bharath Narayanasamy EDR, XDR, SIEM, wazuh

DETECT EDR | SIEM | SOAR LEARNING PATHS

Exploring Wazuh: Introduction

Introduction The Wazuh Agent At the heart of every monitored endpoint sits the Wazuh agent — a lightweight, cross-platform component that acts as your eyes and ears on the systems you care about. Once deployed, it…

Bharath Narayanasamy wazuh

GRC NIS2 | CyFUN

NIS2: A Complete Article-by-Article Reference

NIS2 Directive: Complete Article-by-Article Guide — TheCyberMatrix TheCyberMatrix GRC & Compliance EU Directive 2022/2555 NIS2: A CompleteArticle-by-Article Guide Category: Regulatory Compliance Coverage: All 46 Articles Applies to: Essential & Important Entities across the EU Effective: October…

Bharath Narayanasamy NIS2

Cheat Sheets PenTest ATTACK

Metasploit: Quick Reference Sheet

Metasploit / msfvenom / Meterpreter Cheat Sheet // Metasploit Framework Cheat Sheet msfconsole, msfvenom payload generation, and Meterpreter post-exploitation reference for adversary simulation, purple team exercises, and detection engineering. Commands mapped to MITRE ATT&CK where applicable.…

Bharath Narayanasamy Metasploit, msfvenom, meterpreter

RED TEAM

HAVOC C2: COMMAND & CONTROL FRAMEWORK [PART – I]

A deep-dive into deploying and operating Havoc — the modern, open-source post-exploitation C2 framework built for red teams and purple team simulation labs. From installation and team server configuration to listener setup, payload generation, and agent…

Bharath Narayanasamy red-team, c2, Havoc C2

Traffic Analysis DFIR SOC Analyst

Wireshark Threat Hunting – From Packets to Indicators [HTTP: DEEP-DIVE]

HTTP/HTTP2 Deep-Dive — Wireshark DFIR // HTTP / HTTP2 — Deep-Dive Filter Reference Granular Wireshark display filters for HTTP/1.1 and HTTP/2 — request methods, path & file access, credential extraction, brute force detection, SQL injection, XSS,…

Bharath Narayanasamy wireshark

RED TEAM

SETUP DVWA ON WINDOWS

Introduction to DVWA Damn Vulnerable Web Application (DVWA) is one of the most widely used platforms for learning and practicing web application security testing. As the name suggests, it is a deliberately vulnerable web application designed…

Bharath Narayanasamy DVWA

SOC Analyst Threat Detection and Incident Response Traffic Analysis

Wireshark Threat Hunting – From Packets to Indicators [SMB: DEEP-DIVE]

SMB & Windows Auth Deep-Dive — Wireshark DFIR // SMB & Windows Auth — Deep-Dive Filter Reference Granular Wireshark display filters for SMB2 file & share access (paths, users, operations, error codes), NTLM authentication flow, Kerberos…

Bharath Narayanasamy