Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-4-2The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-azure-compute-2.4.2 |
| description | Ensure 'Python version' is currently supported (if in use) |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","functions","deployment-slots"] |
| cis_id | 2.4.2 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Periodically, older versions of Python may be deprecated and no longer supported. Using a supported version of Python for function app deployment slots is recommended to avoid potential unpatched vulnerabilities.
Deprecated and unsupported versions of programming and scripting languages can present vulnerabilities which may not be addressed or may not be addressable.
If your app is written using version-dependent features or libraries, they may not be available on more recent versions. If you wish to update, research the impact thoroughly.
App Services or Function App.Deployment, click Deployment slots.Settings, click Configuration.General settings pane, ensure that for a Stack of Python, the Python Version reflects a currently supported release.Run the following command to list function apps:
az functionapp list
For each function app, run the following command to list deployment slots:
az functionapp deployment slot list --resource-group <resource-group-name> --name <function-app-name>
For each deployment slot, run the following command to get the Python version:
az resource show --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<function-app-name>/slots/<deployment-slot-name> --query properties.[linuxFxVersion,pythonVersion]
If Python is in use, ensure the version is currently supported.
Take note of the currently supported versions (given a status of "security") of Python here: https://devguide.python.org/versions/
If Python is in use, the Python version should reflect a currently supported release.
App Services or .Function AppDeployment, click Deployment slots.Settings, click Configuration.General settings pane, for a Stack of Python, set the Python Version to a currently supported release.Save.Continue.Run the following command to list supported runtimes:
az functionapp list-runtimes
For each deployment slot requiring remediation, run the following command with the appropriate parameters to update the Python version:
az resource update --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<function-app-name>/slots/<deployment-slot-name> --set properties.linuxFxVersion="PYTHON|<python-version>"
The version is selected during creation.
Level 1 | Manual