hunt-tls-network

To audit DNS and TLS misconfigurations, run a comprehensive security audit against the target domain to evaluate certificate validity, cipher suites, HSTS, and AXFR settings, aggregating results into actionable remediation findings.

You can check for email spoofing vulnerabilities by assessing SPF, DKIM, and DMARC configurations during a DNS audit, which identifies missing or misconfigured email authentication controls on the target infrastructure.

Detecting HSTS and security header gaps requires evaluating HTTP security header configurations on target domains, systematically identifying missing protections and aggregating them into threat modeling reports for red-team remediation.

Yes, you can assess certificate transparency and CAA records across multiple domains by running structured TLS and DNS security checks, which enumerate misconfigurations and aggregate them into actionable findings for enterprise environments.

Yes, this security audit approach works for both red-team reconnaissance and blue-team hardening by identifying TLS/DNS gaps and email spoofing risks, providing actionable remediation guidance useful for both offensive and defensive operations.

When checking mTLS bypass and AXFR zone transfers, limitations depend on target infrastructure configurations and access controls, as these security audits evaluate external-facing DNS and TLS settings without guaranteed internal network access.