Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-tomcat9-v120-2-6La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
Basé sur la classification professionnelle SOC
Affichage de SKILL.md
| name | cis-tomcat9-v120-2.6 |
| description | Turn off TRACE (Automated) |
| category | cis-tomcat |
| version | 1.2.0 |
| author | cyberstrike-official |
| tags | ["cis","tomcat","linux","java","information-leakage","server-info"] |
| cis_id | 2.6 |
| cis_benchmark | CIS Apache Tomcat 9 Benchmark v1.2.0 |
| tech_stack | ["linux","tomcat","java"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
The HTTP TRACE verb provides debugging and diagnostics information for a given request.
Diagnostic information, such as that found in the response to a TRACE request, often contains sensitive information which may useful to an attacker. By preventing Tomcat from providing this information, the risk of leaking sensitive information to a potential attacker is reduced.
Perform the following to determine if the server platform, as advertised in the HTTP Server header, has been changed:
$CATALINA_HOME/conf/server.xml.allowTrace attribute or, if present, the allowTrace attribute is NOT set true.Perform the following for each application hosted within Tomcat with a web-app root element in the web.xml:
$CATALINA_HOME/webapps/<app_name>/WEB-INF/web.xml.security-constraint/web-resource-collection exists the child value pairings:
web-resource-name with a value of restricted methods.url-pattern with a value of /*.http-method with a value of TRACE.Perform the following to prevent Tomcat from accepting a TRACE request:
allowTrace attribute for each Connector specified in $CATALINA_HOME/conf/server.xml to false.<Connector ... allowTrace="false" />
Alternatively, ensure the allowTrace attribute is absent from each Connector specified in $CATALINA_HOME/conf/server.xml.
<security-constraint>
<web-resource-collection>
<web-resource-name>restricted methods</web-resource-name>
...
<http-method>TRACE</http-method>
...
</web-resource-collection>
...
</security-constraint>
Tomcat does not allow the TRACE HTTP verb by default. Tomcat will only allow TRACE if the allowTrace attribute is present and set to true.
v8:
v7: