Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-2-5El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-azure-compute-2.2.5 |
| description | Ensure 'FTP state' is set to 'FTPS only' or 'Disabled' |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","deployment-slots","ftp","ftps","encryption","data-in-transit"] |
| cis_id | 2.2.5 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
By default, App Service supports deployment over FTP. If FTP is essential for a deployment workflow, FTPS should be enforced for all App Service deployment slots.
If FTPS is not explicitly required, the recommended setting is Disabled.
FTP is an unencrypted network protocol that transmits data -- including passwords -- in clear text. The use of this protocol can lead to both data and credential compromise and can present opportunities for exfiltration, persistence, and lateral movement.
Deployment workflows that rely on FTP or FTPS rather than WebDeploy or HTTPS endpoints may be affected.
App Services.Deployment, click Deployment Slots.Settings, click Configuration.General settings pane, under Platform settings, ensure that FTP state is set to FTPS only or Disabled.Run the following command to list apps:
az webapp list
For each app, run the following command to list deployment slots:
az webapp deployment slot list --resource-group <resource-group-name> --name <app-name>
For each deployment slot, run the following command to get the FTPS state setting:
az resource show --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<app-name>/slots/<deployment-slot-name> --query properties.ftpsState
Ensure that "FtpsOnly" or "Disabled" is returned.
The ftpsState property should return "FtpsOnly" or "Disabled".
App Services.Deployment, click .Deployment SlotsSettings, click Configuration.General settings pane, under Platform settings, set FTP state to FTPS only or Disabled.Save.Continue.For each deployment slot requiring remediation, run the following command to set FTPS state to FtpsOnly or Disabled:
az resource update --name web --resource-group <resource-group-name> --namespace Microsoft.Web --resource-type config --parent sites/<app-name>/slots/<deployment-slot-name> --set properties.ftpsState=<FtpsOnly|Disabled>
By default, FTP state is set to FTPS only.
Level 1 | Automated