Menü
Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-3-6Der Befehl bleibt in einer Zeile. Scrollen Sie horizontal, um ihn vor dem Kopieren vollständig zu prüfen.
Sie bevorzugen eine lokale Kopie? Laden Sie die Dateien herunter, die SkillsMP derzeit vorliegen.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basierend auf der SOC-Berufsklassifikation
SKILL.md wird angezeigt
| name | cis-azure-compute-2.3.6 |
| description | Ensure 'HTTPS Only' is set to 'On' |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","function-apps","https","tls","encryption","data-in-transit"] |
| cis_id | 2.3.6 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Azure App Service allows function apps to run under both HTTP and HTTPS by default. Function apps can be accessed by anyone using non-secure HTTP links by default. Non-secure HTTP requests can be restricted and all HTTP requests redirected to the secure HTTPS port. It is recommended to enforce HTTPS-only traffic.
Enabling HTTPS-only traffic will redirect all non-secure HTTP requests to HTTPS ports. HTTPS uses the TLS/SSL protocol to provide a secure connection which is both encrypted and authenticated. It is therefore important to support HTTPS for the security benefits.
When it is enabled, every incoming HTTP request is redirected to the HTTPS port. This means an extra level of security will be added to the HTTP requests made to the deployment slot.
App Services or Function App.Settings, click Configuration.General settings tab, under Platform settings, ensure that HTTPS Only is set to On.Run the following command to list function apps:
az functionapp list
For each function app, run the following command to get the HTTPS setting:
az functionapp show --resource-group <resource-group-name> --name <function-app-name> --query "httpsOnly"
Ensure that the command returns true.
Run the following command to list function apps:
Get-AzFunctionApp
Run the following command to get the function app with a given name:
$app = Get-AzFunctionApp -ResourceGroupName <resource-group-name> -Name <function-app-name>
Run the following command to get the HTTPS setting for the function app:
$app.httpsOnly
Ensure that the command returns True. Repeat for each function app.
The httpsOnly setting should return true.
App Services or Function App.Settings, click Configuration.General settings tab, under Platform settings, next to HTTPS Only, select the radio button next to On.Save.Continue.For each function app requiring remediation, run the following command to enable HTTPS Only:
az resource update --resource-group <resource-group-name> --name <function-app-name> --resource-type "Microsoft.Web/sites" --set properties.httpsOnly=true
HTTPS Only is enabled by default.
Level 1 | Automated