Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-1-13El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-azure-compute-2.1.13 |
| description | Ensure managed identities are configured |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","managed-identity","entra-id","credential-management"] |
| cis_id | 2.1.13 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Managed identities from Microsoft Entra ID allow App Service apps to securely access other Azure services without the need to provision or rotate any secrets.
Using managed identities with App Service apps eliminates the need to store and manage credentials to access Azure resources.
Minor administrative overhead to configure and manage role assignments for managed identities.
App Services.Settings, click Identity.System assigned pane, the Status is set to On, and an Object (principal) ID is displayed, or that in the User assigned pane, a managed identity is listed.Run the following command to list web apps:
az webapp list
For each web app, run the following command:
az webapp identity show --resource-group <resource-group-name> --name <app-name> --query type
Ensure the command returns SystemAssigned, UserAssigned, or both.
Run the following command to list web apps:
Get-AzWebApp
Run the following command to get the web app in a resource group with a given name:
Get-AzWebapp -ResourceGroupName <resource-group-name> -Name <app-name>
Run the following command to get the assigned identity type for a web app:
$webapp.Identity.Type
Ensure the command returns SystemAssigned, UserAssigned, or both.
The identity type should return SystemAssigned, UserAssigned, or both.
App Services.Settings, click Identity.System assigned pane, under Status, click On.Save.Yes.User assigned pane, click Add.Add.For each web app requiring remediation, run the following command to assign a managed identity:
az webapp identity assign --resource-group <resource-group-name> --name <app-name>
For each web app requiring remediation, run the following command to assign a managed identity:
Set-AzWebApp -AssignIdentity $True -ResourceGroupName <resource-group-name> -Name <app-name>
Managed identities are disabled by default for App Service apps.
Level 1 | Automated