Detect TLS/SSL and DNS security vulnerabilities using testssl.sh, sslyze, dig, and curl.
npx skills add https://github.com/Skobyn/talon --skill hunt-tls-network-skobyn
Please help me install this Agent Skill. Skill: hunt-tls-network Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-tls-network Command: npx skills add https://github.com/Skobyn/talon --skill hunt-tls-network-skobyn
This Skill identifies potential security vulnerabilities in TLS/SSL and DNS configurations, aiding in the assessment of web application security.
Run the 'hunt-tls-network' skill on the target domain to scan for TLS/SSL and DNS misconfigurations.
High-intent search queries and answers about installing and using this skill.
To check for TLS/SSL and DNS misconfigurations, you can scan a target domain to detect weak cipher suites, missing HSTS, expired certificates, and absent SPF/DKIM/DMARC records using tools like testssl.sh, sslyze, dig, and curl.
The best way to detect missing SPF, DKIM, and DMARC records is to perform a DNS security scan using dig and curl, which identifies email authentication misconfigurations and dangling CNAMEs during web application reconnaissance.
Yes, you can use testssl.sh and sslyze to perform a TLS/SSL audit that detects expired certificates, weak cipher suites, and missing HSTS headers for comprehensive web application penetration testing.
Yes, you need dig and curl installed, as they are required dependencies for DNS analysis and HTTP probing, alongside testssl.sh and sslyze for full TLS/SSL vulnerability detection and security assessment.
You should run a DNS and TLS/SSL audit during the reconnaissance phase of penetration testing to uncover infrastructure weaknesses, missing security headers, and misconfigurations that could lead to security breaches.
A TLS/SSL and DNS security scan identifies vulnerabilities including missing HSTS, weak cipher suites, expired certificates, missing SPF/DKIM/DMARC records, DNS Zone Transfers, and dangling CNAMEs in web applications.
bpnrockstarAudit TLS/SSL and DNS configurations for misconfigurations and email spoofing vulnerabilities.
dapperdiversGenerate structured markdown penetration test reports from JSON security scan findings.
BishopCodesEnumerate subdomains, DNS records, mail servers, and open ports.
EntroVyxIdentify and validate exploitable TLS/SSL and DNS misconfigurations during reconnaissance.
