Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-1-9El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Mostrando SKILL.md
Basado en la clasificación ocupacional SOC
| name | cis-azure-compute-2.1.9 |
| description | Ensure end-to-end TLS encryption is enabled |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","tls","e2e-encryption","data-in-transit"] |
| cis_id | 2.1.9 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
End-to-end (E2E) TLS encryption ensures that front-end to worker communication within App Service apps is encrypted using TLS. Without this feature, while incoming HTTPS requests are encrypted to the front ends, the traffic from front ends to workers running the application workloads would travel unencrypted inside Azure's infrastructure.
E2E TLS helps ensure full encryption of traffic between:
Enabling end-to-end TLS encryption may introduce minimal latency and require additional configuration of certificates and HTTPS settings to ensure compatibility.
App Services.Settings, click Configuration.General settings pane, under Platform settings, ensure that Enable end-to-end TLS encryption is set to On.Run the following command to list apps:
az webapp list
For each app, run the following command to get the end-to-end TLS encryption setting:
az webapp show --resource-group <resource-group-name> --name <app-name> --query endToEndEncryptionEnabled
Ensure that the command returns true.
Not specifically documented for this control.
The endToEndEncryptionEnabled setting should return true.
App Services.Settings, click Configuration.General settings pane, under Platform settings, next to Enable end-to-end TLS encryption, click the radio button next to On.Save.Continue.For each app requiring remediation, run the following command to enable end-to-end TLS encryption:
az resource update --resource-group <resource-group-name> --name <app-name> --resource-type "Microsoft.Web/sites" --set properties.endToEndEncryptionEnabled=true
Not specifically documented for this control.
By default, end-to-end TLS encryption is disabled.
Level 1 | Automated