Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-docker-v160-2-1El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-docker-v160-2.1 |
| description | Run the Docker daemon as a non-root user, if possible |
| category | cis-docker |
| version | 1.6.0 |
| author | cyberstrike-official |
| tags | ["cis","docker","daemon","rootless","privilege-reduction","security-hardening"] |
| cis_id | 2.1 |
| cis_benchmark | CIS Docker Benchmark v1.6.0 |
| tech_stack | ["docker"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Profile Applicability: Level 1 - Docker - Linux
Assessment Status: Manual
Rootless mode executes the Docker daemon and containers inside a user namespace, with both the daemon and the container are running without root privileges.
Rootless mode allows running the Docker daemon and containers as a non-root user to mitigate potential vulnerabilities in the daemon and the container runtime.
There are multiple prerequisites depending on which distribution that is in use, and also known limitations regarding networking and resource limitation.
Running in rootless mode also changes the location of any configuration files in use, including all containers using the daemon.
Running the following command will show any running dockerd processes and which user that is managing the daemon:
ps -fe | grep 'dockerd'
This command should show which user is running the dockerd process. If running in rootless mode, it should show a non-root user.
Follow the current Docker documentation on how to install the Docker daemon as a non-root user.
The Docker daemon is running as the root user by default.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 4.1 Establish and Maintain a Secure Configuration Process Establish and maintain a secure configuration process for enterprise assets (end-user devices, including portable and mobile, non-computing/IoT devices, and servers) and software (operating systems and applications). Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard. | ● | ● | ● |
| v7 | 4 Controlled Use of Administrative Privileges Controlled Use of Administrative Privileges |
Profile: Level 1 - Docker - Linux Assessment Status: Manual