CYNARKS · Visual Learning · V1 (24 scenarios)
See it. Step it. Understand it.
One concept = one animated story. Reusable Visual Kit nodes compose into Cyber Flow lessons — not a collage of 24 images. Batch B1 locks Network Fundamentals (01–06).
Module 01 · start here · style lock
TCP 3-Way Handshake
SYN → SYN-ACK → ACK with glowing packet — foundation of reliable sessions.
Per scenario
- Animated packet flow
- Step captions + packet/code
- Attack / defense + controls
- Real-world note + quiz
Batch B1 · Network Fundamentals (live)
TCP Connection Teardown
Four-way close: FIN → ACK → FIN → ACK — each direction shuts down separately.
02 · LiveDNS Resolution
Browser → Resolver → Root → TLD → Auth — recursive lookup to an IP.
03 · LiveHTTP Request & Response
GET /index.html out; 200 OK + HTML back — request/response on the wire.
04 · LiveHTTPS / TLS Handshake
ClientHello → certificate → session keys → encrypted AppData.
05 · LiveARP Resolution
Who-has broadcast → only the owner replies with MAC → cache learns the mapping.
06 · LiveNetwork Routing & Switching
Internet → firewall → router → host — zones, default-deny, DMZ path.
Roadmap · batches B2–B5
Same CYNARKS Visual Kit style. Approve B1 visuals, then APPROVE VISUAL LEARNING B2.
2 · Web & Application Security
SQL Injection – Attack vs Defense
Malicious OR 1=1 vs prepared statements and least privilege.
08 · PreviewCross-Site Scripting (XSS)
Injected script stored, then executed in a victim browser.
09 · PreviewAuthentication & Sessions
Login → HttpOnly/SameSite cookies → JWT claims → access granted.
Authorization & RBAC
Users → Roles → Permissions → Resources (Jane as Support Agent).
API Security
Gateway filter chain: token → JWT decode → authz → microservices.
CSRF Protection
Forged cross-site request vs anti-CSRF token validation.
3 · Infrastructure & Cloud
CDN, WAF & Reverse Proxy
Edge cache + WAF allow/block before origin and database.
14 · PreviewCloud IAM
Users/roles/policies gate EC2, S3, and data stores.
VPN & Secure Tunneling
Encrypted tunnel from remote client into the private network.
Active Directory & Kerberos
Ticket-granting tickets and service tickets for domain auth.
4 · Attacks & Threat Simulation
ARP Spoofing & MITM
Poisoned ARP cache lets an attacker sit in the middle.
Phishing Attack
Inbox lure → credential harvest → session abuse.
Malware Analysis
Sandbox timeline: delivery → exec → C2 → detect.
DDoS Attack & Mitigation
Flood vs scrubbing / rate limits / anycast absorb.
5 · SOC & Defensive Security
SOC Alert Investigation
Alert triage → enrich → contain → document.
Digital Forensics & Incident Response
Preserve evidence, timeline, eradicate, recover.
IDS / IPS Detection
Signature/anomaly detect vs inline block.
VAPT Lifecycle
Scope → recon → exploit (lab) → report → retest.
Visual Kit (system parts)
Build once, reuse across all 24 scenarios — no per-topic GIF farm.
Full Cyber Flow catalog: Cyber Flow Explorer → · Plan: docs/synapse/VISUAL-LEARNING-V1-24.md