hunt-tls-network

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable instructions for offensive operations (AXFR zone transfer, subdomain takeover by registering victim resources and serving a canary, DMARC/email spoofing with a swaks PoC, and mTLS bypass via spoofed headers) that enable unauthorized data disclosure, impersonation, and auth bypass.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text via DNS/email/protocol responses generated by an outsider-controlled target domain, including parsing HTTP response bodies (Phase 6.5 takeover fingerprint) and SMTP-delivered email headers/bodies (Phase 4 DMARC spoof “delivered-to-inbox” proof), which can contain attacker-supplied text.