Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-ocp-vm-v100-1-4El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-ocp-vm-v100-1-4 |
| description | Disable downwardMetrics feature gate (Automated) |
| category | cis-openshift-virtualization |
| version | 1.0 |
| author | cyberstrike-official |
| tags | ["cis","openshift","kubernetes","openshift-virtualization","kubevirt","vm","platform-configuration","feature-gate","downward-metrics","information-disclosure"] |
| cis_id | 1.4 |
| cis_benchmark | CIS Redhat OpenShift Virtual Machine Extension Benchmark v1.0.0 |
| tech_stack | ["kubernetes","openshift","openshift-virtualization","kubevirt"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
The downwardMetrics feature allows users to collect and monitor additional metrics related to host and virtual machine performance.
Enabling the downwardMetrics feature introduces the risk of unauthorized or unintended sharing of information, as well as manipulation of information flow restrictions. The additional metrics include sensitive performance data, which could aid in the reconnaissance activities of a malicious actor.
Guests are not able to use the host metrics.
Check the downwardMetrics feature gate is disabled:
$ oc get hyperconverged kubevirt-hyperconverged -n openshift-cnv -ojsonpath='{.spec.featureGates.downwardMetrics}'
Verify the output is false.
Set downwardMetrics to False:
$ oc patch hyperconverged kubevirt-hyperconverged -n openshift-cnv --type='json' -p='[
{"op": "replace", "path": "/spec/featureGates/downwardMetrics", "value": false },
]'
By default, the downwardMetrics is set to false.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 8.2 Collect Audit Logs | Y | Y | Y |
| v8 | 8.3 Ensure Adequate Audit Log Storage | Y | Y | Y |
| v7 | 6.3 Enable Detailed Logging | N | Y | Y |
| v7 | 14.9 Enforce Detail Logging for Access or Changes to Sensitive Data | N | N | Y |
| Tactic | Technique |
|---|
| Discovery | T1082 System Information Discovery |
| Reconnaissance | T1592 Gather Victim Host Information |