Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-3-11El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Mostrando SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
| name | cis-azure-compute-2.3.11 |
| description | Ensure 'App Service authentication' is set to 'Enabled' |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","function-apps","app-service-auth","authentication","identity"] |
| cis_id | 2.3.11 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
App Service authentication can prevent anonymous HTTP requests from reaching an app, or authenticate those with tokens before they reach the app. If an anonymous request is received from a browser, App Service will redirect to a login page. To handle the login process, a choice from a set of identity providers can be made, or a custom authentication mechanism can be implemented.
By enabling authentication, every incoming HTTP request passes through it before being handled by the application code. It also handles authentication of users with the specified provider (Entra ID, Facebook, Google, Microsoft Account, and Twitter), validation, storage and refreshing of tokens, managing the authenticated sessions, and injecting identity information into request headers.
This is only required for apps that require authentication. Enabling it on a site like a marketing or support website will prevent unauthenticated access, which would be undesirable.
Adding an authentication requirement will increase costs and require additional security components to facilitate the authentication.
App Services or Function App.Settings, click Authentication.App Service authentication is set to Enabled.Run the following command to list function apps:
az functionapp list
For each function app, run the following command to get the authentication setting:
For v1 auth commands:
az webapp auth show --resource-group <resource-group-name> --name <function-app-name> --query enabled
For v2 auth commands:
az webapp auth show --resource-group <resource-group-name> --name <function-app-name> --query properties.platform.enabled
Ensure that true is returned.
App Service authentication should be enabled (return true).
App Services or Function App.Settings, click Authentication.Add identity provider.Add.App Service authentication is set to Disabled:
Enable authentication.For each function app requiring remediation, run the following command to enable authentication:
az webapp auth update --resource-group <resource-group-name> --name <function-app-name> --enabled true
Note: In order to access App Service authentication settings for an app using the Microsoft API, the Website Contributor permission at the subscription level is required. A custom role can be created instead of Website Contributor to provide more specific permissions and maintain the principle of least privileged access.
By default, App Service authentication is set to Disabled.
You're not required to use App Service for authentication and authorization. Many web frameworks come with security features built in, and you can use them if you like. If you need more flexibility than App Service provides, you can also write your own utilities. Secure authentication and authorization require a deep understanding of security, including federation, encryption, JSON Web Token (JWT) management, grant types, and so on.
Level 2 | Automated