How nirmitrip/cybergenx-security-operations-lab works
This repository documents and evidences a virtual security-operations lab, rather than implementing a software application. Its documented workflow runs from controlled reconnaissance and traffic generation through web defenses and intrusion detection to Wazuh monitoring and investigation. The README describes the system relationships; the tree contains configuration, demonstration scripts, and collected evidence, but no runtime source excerpts. Accordingly, service nodes represent the documented lab architecture, not code implemented here.
Main entry points: cybergenx_demo.sh Kali Linux · demo.testfire.net.conf Apache · wazuh Wazuh Agent · evidence Collected Evidence
Components 19
Offensive Validation
- Kali Linux
scripts/kali/cybergenx_demo.sh - Reconnaissance
- Web Enumeration
- Test Traffic
Web Protection
- Apache
configs/apache/demo.testfire.net.conf - ModSecurity WAF
configs/modsecurity/modsecurity.conf - OWASP CRS
- Vulnerable Apps
Detection and SIEM
- Snort IDS
evidence/snort - Suricata IDS
evidence/suricata - Wazuh Agent
evidence/wazuh - Wazuh Manager
- Wazuh Indexer
- Wazuh Dashboard
- Threat Investigation
Lab Artifacts
- Ubuntu Demo
scripts/ubuntu/ubuntu_demo_view.sh - Wazuh Demo
scripts/wazuh/wazuh_demo_view.sh - Collected Evidence
evidence
Other components
- Security Operator
Connections 19
- Security Operator → Kali Linux: runs
README.md - Kali Linux → Reconnaissance: performs
README.md - Kali Linux → Web Enumeration: enumerates
README.md - Kali Linux → Test Traffic: generates
README.md - Test Traffic → Apache: reaches
README.md - Apache → ModSecurity WAF: protected by
README.md - ModSecurity WAF → OWASP CRS: uses rules
README.md - Apache → Vulnerable Apps: serves
README.md - Test Traffic → Snort IDS: detected by
README.md - Test Traffic → Suricata IDS: detected by
README.md - Snort IDS → Wazuh Agent: monitored through
README.md - Suricata IDS → Wazuh Agent: monitored through
README.md - Wazuh Agent → Wazuh Manager: sends monitoring
README.md - Wazuh Manager → Wazuh Indexer: indexes events
README.md - Wazuh Indexer → Wazuh Dashboard: feeds
README.md - Wazuh Dashboard → Threat Investigation: supports
README.md - Kali Linux → Collected Evidence: collects
- Ubuntu Demo → Collected Evidence: validates
- Wazuh Demo → Collected Evidence: validates