Profile My skills Saved Collections Edit profile Submit a skill

Insecure Network Socket

Detects plain TCP sockets without TLS wrapping used for sensitive network communication.

zakirkun ebfba8c 2 files · 2.6 KB Updated
Coding & Dev Tools

File contents

Insecure Network Socket

Overview

Plain TCP sockets transmit data unencrypted. Any network observer can intercept credentials, session tokens, and sensitive data. Applications should use TLS-wrapped sockets for all sensitive communication.

Detection Strategy

  • socket.socket() in Python without ssl.wrap_socket()
  • net.Socket in Node.js instead of tls.connect()
  • net.Dial("tcp", ...) in Go instead of tls.Dial

Remediation

Wrap all sockets in TLS using the appropriate library:

  • Python: ssl.create_default_context() + context.wrap_socket()
  • Node.js: tls.connect() or https
  • Go: tls.Dial() or crypto/tls

zakirkun/ice-tea/tree/main/skills/network/insecure-socket commit ebfba8c65e

Browse category

Frequently asked questions

npx skillmds@latest add zakirkun/insecure-network-socket