NetwerkLABS

SETUP DVWA ON WINDOWS

Introduction to DVWA Damn Vulnerable Web Application (DVWA) is one of the most widely used platforms for learning and practicing web application security testing. As the name suggests, it is a deliberately vulnerable web application designed…

Bharath Narayanasamy DVWA

SOC Analyst Threat Detection and Incident Response Traffic Analysis

Wireshark Threat Hunting – From Packets to Indicators [SMB: DEEP-DIVE]

SMB & Windows Auth Deep-Dive — Wireshark DFIR // SMB & Windows Auth — Deep-Dive Filter Reference Granular Wireshark display filters for SMB2 file & share access (paths, users, operations, error codes), NTLM authentication flow, Kerberos…

Bharath Narayanasamy

SOC Analyst Threat Detection and Incident Response Traffic Analysis

Wireshark Threat Hunting – From Packets to Indicators

Wireshark DFIR Cheat Sheet // Wireshark DFIR Cheat Sheet Display filters, detection techniques, traffic analysis workflows, and TShark CLI commands for Digital Forensics & Incident Response. Filters are mapped to MITRE ATT&CK where applicable. Wireshark 4.x…

Bharath Narayanasamy wireshark

VulnLAB RED TEAM Purple Teaming

Nmap Cheat Sheet

Nmap Cheat Sheet nmap — cheat sheet Network Mapper · Comprehensive Command Reference 🎯 Target Specification 8 nmap 192.168.1.1·Scan a single IP nmap 192.168.1.1-254·Scan IP range nmap 192.168.1.0/24·Scan CIDR subnet nmap 10.0.0.1 10.0.0.2·Scan multiple IPs nmap…

Bharath Narayanasamy

GRC ISO/IEC 27001

ISO 27001 Annex A Controls: A Practitioner’s Guide to the 93 Controls

Most ISO 27001 guides read like a copy of the standard with prettier formatting. This one is written from the practitioner's side of the table — the side where you're the consultant or ISMS manager who…

Bharath Narayanasamy ISO27001

Purple Teaming CyBER Tools

Atomic Red Team — Adversary Simulation and Detection

Full Kill Chain Simulation + Splunk Detection Dashboard Operation Silent Ledger | Northbridge Financial APT SimulationPurple Team Playbook: ART Execution → Splunk Detection → Custom Dashboard 🗺️ Kill Chain Map — Techniques We'll Simulate Kill Chain…

Bharath Narayanasamy Atomic RED, splunk, detection_engineering

RED TEAM

The Bait Lab – Phishing Simulations, Practical Campaigns with GoPhish & Evilginx (PART: II)

Disclaimer “This guide is for authorized testing in a controlled environment. Obtain written approval before sending any simulated emails.” SekurFinCorp: Phishing Simulation (Credential Capture via a Realistic Banking Lure) In Part 1 we covered installing and…

Bharath Narayanasamy red-team, GoPhish

RED TEAM

The Bait Lab – Phishing Simulations, Practical Campaigns with GoPhish & Evilginx (PART: I)

Disclaimer “This guide is for authorized testing in a controlled environment. Obtain written approval before sending any simulated emails.” Installing GoPhish on Ubuntu 24.04 GoPhish provides a complete platform to design, launch, and track phishing campaigns…

Bharath Narayanasamy red-team, GoPhish, phishing

RED TEAM

RED Teaming: Mythic C2 Framework

Disclaimer: This post is created solely for educational and research purposes. The techniques, tools, and concepts discussed are intended to enhance cybersecurity awareness and skills by demonstrating how offensive security testing works. Unauthorized access to computer systems is a…

Bharath Narayanasamy c2, Mythic C2

RED TEAM OpenBAS

Installing OpenBAS: The OpenSource Breach and Attack Simulation

Introduction In today's rapidly evolving cybersecurity landscape, organizations need robust tools to test their security posture and validate their defenses. OpenBAS (Open Breach and Attack Simulation) emerges as a powerful open-source platform that enables security teams…

Bharath Narayanasamy BAS, OpenBAS