Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-2-3El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-azure-compute-2.2.3 |
| description | Ensure 'PHP version' is currently supported (if in use) |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","deployment-slots","php","runtime-version","software-support"] |
| cis_id | 2.2.3 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Periodically, older versions of PHP may be deprecated and no longer supported. Using a supported version of PHP for App Service deployment slots is recommended to avoid potential unpatched vulnerabilities.
Deprecated and unsupported versions of programming and scripting languages can present vulnerabilities which may not be addressed or may not be addressable.
If your app is written using version-dependent features or libraries, they may not be available on more recent versions. If you wish to update, research the impact thoroughly.
Take note of the currently supported versions of PHP here: https://www.php.net/supported-versions.php
App Services.Deployment, click Deployment slots.Settings, click Configuration.General settings pane, ensure that for a Stack of PHP, the Major version and Minor version reflect a currently supported release.Run the following command to list apps:
az webapp list
For each app, run the following command to list deployment slots:
az webapp deployment slot list --resource-group <resource-group-name> --name <app-name>
For each deployment slot, run the following command to get the PHP version:
az resource show --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<app-name>/slots/<deployment-slot-name> --query properties.[linuxFxVersion,phpVersion]
If PHP is in use, ensure the version is currently supported.
The PHP version configured for the deployment slot should be a currently supported release as listed on the PHP Supported Versions page.
Note: No action is required if PHP is not in use.
App ServicesDeployment, click Deployment slots.Settings, click Configuration.General settings pane, for a Stack of PHP, set the Major version and Minor version to a currently supported release.Save.Continue.Run the following command to list supported runtimes:
az webapp list-runtimes
For each deployment slot requiring remediation, run the following command with the appropriate parameters to update the PHP version:
az resource update --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<app-name>/slots/<deployment-slot-name> --set properties.[linuxFxVersion|phpVersion]="<python-runtime-version|python-version>"
The version is selected during creation.
Level 1 | Manual