infrastructure-checklist

# Infrastructure Security Assessment Checklist This checklist provides a systematic approach to passive infrastructure security assessment. Replace `TARGET` with the actual domain or IP address being assessed. ## 1. SSL/TLS Configuration Use SSL Labs API: ```bash # Submit scan (non-cached) curl -s "https://api.ssllabs.com/api/v3/analyze?host=TARGET&publish=off&startNew=on" # Poll for results (wait ~30-60s between calls, check status field) curl -s "https://api.ssllabs.com/api/v3/analyze?host=TARGET" ``` Key fields to extract from response: - Overall grade (A+, A, B, C, F) - Protocol support (TLS 1.0, 1.1, 1.2, 1.3) - Certificate chain validity - Certificate expiration date - Key exchange strength - Cipher suite strength - Known vulnerabilities (Heartbleed, POODLE, ROBOT, etc.) Alternative with curl: ```bash curl -vI https://TARGET 2>&1 | grep -E "SSL connection|subject:|expire|issuer:|TLSv" ``` Quick check with openssl (if available): ```bash echo | openssl s_client -connect TARGET:443 -servername TARGET 2>/dev/null | openssl x509 -noout -dates -subject -issuer ``` ## 2. DNS Records ```bash # Core records dig TARGET A +short dig TARGET AAAA +short dig TARGET MX +short dig TARGET NS +short dig TARGET TXT +short # Email authentication dig _dmarc.TARGET TXT +short dig TARGET TXT +short | grep "v=spf1" dig default._domainkey.TARGET TXT +short dig selector1._domainkey.TARGET TXT +short dig selector2._domainkey.TARGET TXT +short dig google._domainkey.TARGET TXT +short # ...