Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-cassandra40-v100-3-7The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-cassandra40-v100-3.7 |
| description | Review User-Defined Roles |
| category | cis-cassandra |
| version | 1.0.0 |
| author | cyberstrike-official |
| tags | ["cis","cassandra","access-control","roles"] |
| cis_id | 3.7 |
| cis_benchmark | CIS Apache Cassandra 4.0 Benchmark v1.0.0 |
| tech_stack | ["cassandra"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
The MEMBER_OF column found in the system_auth.roles table shows roles granted to roles.
The MEMBER_OF column shows whoever has roles granted to roles and depending on the role and the privileges grant to the role should be limited. Limiting the accounts that have the certain roles reduces the chances that an attacker can exploit these capabilities.
Execute the following SQL statement to audit this setting:
select role, can_login, member_of from system_auth.roles;
Looking for can_login which tells you that role can log into cassandra and member_of is when roles are granted to roles.
Looking at those users from the query that have member_of that is NOT null, decide if that user truly needs that role, if not, for each user, issue the following SQL statement (replace <is_member> with the value of member_of returned by the query in the audit procedure)
revoke <is_member> from role;
N/A
N/A