Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-1-2The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-azure-compute-2.1.2 |
| description | Ensure 'Python version' is currently supported (if in use) |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","python","runtime-version","patch-management"] |
| cis_id | 2.1.2 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Periodically, older versions of Python may be deprecated and no longer supported. Using a supported version of Python for App Service apps is recommended to avoid potential unpatched vulnerabilities.
Deprecated and unsupported versions of programming and scripting languages can present vulnerabilities which may not be addressed or may not be addressable.
If your app is written using version-dependent features or libraries, they may not be available on more recent versions. If you wish to update, research the impact thoroughly.
App Services.Settings, click Configuration.General settings pane, ensure that for a Stack of Python, the Major version and Minor version reflect a currently supported release.Run the following command to list apps:
az webapp list
For each app, run the following command to get the Python version:
az webapp config show --resource-group <resource-group-name> --name <app-name> --query "{LinuxFxVersion:linuxFxVersion,WindowsFxVersion:windowsFxVersion,PythonVersion:pythonVersion}"
If Python is in use, ensure the version is currently supported.
$app = Get-AzWebApp -Name <app-name> -ResourceGroup <resource-group-name>
$app.SiteConfig |Select-Object LinuxFXVersion, WindowsFxVersion, PythonVersion
If Python is in use, ensure the version is currently supported.
The Python version in use should have a status of "security" or higher as listed at https://devguide.python.org/versions/.
App Services.Settings, click Configuration.General settings pane, for a Stack of Python, set the Major version and to a currently supported release.Minor versionSave.Continue.Note: No action is required if Python is not in use.
Run the following command to list supported runtimes:
az webapp list-runtimes
For each app requiring remediation, run the following command with the appropriate parameters to update the Python version:
az webapp config set --resource-group <resource-group-name> --name <app-name> [--windows-fx-version "PYTHON|<version>"] [--linux-fx-version "PYTHON|<version>"]
Not applicable for Python version updates via PowerShell at this time.
The version is selected during creation.
Level 1 | Manual