Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-docker-2-7La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Affichage de SKILL.md
Basé sur la classification professionnelle SOC
| name | cis-docker-2.7 |
| description | Ensure devicemapper storage driver is not used |
| category | cis-docker |
| version | 1.8.0 |
| author | cyberstrike-official |
| tags | ["cis","docker","linux","containers","daemon-configuration","storage-driver","devicemapper"] |
| cis_id | 2.7 |
| cis_benchmark | CIS Docker Benchmark v1.8.0 |
| tech_stack | ["linux","docker"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
• Level 1 - Docker - Linux
Do not use devicemapper as the storage driver for your Docker instance.
The devicemapper storage driver is deprecated in favor of overlay2, and has been removed in Docker Engine v25.0.
If you are using Device Mapper, you must migrate to a supported storage driver before upgrading to Docker Engine v25.0.
Execute the below command and verify that devicemapper is not used as storage driver:
docker info --format 'Storage Driver: {{ .Driver }}'
The above command should not return devicemapper.
Do not explicitly use devicemapper as storage driver.
For example, do not start Docker daemon as below:
dockerd --storage-driver devicemapper
By default, Docker uses overlay2 as the storage driver on most of the platforms. The default storage driver can vary based on your OS vendor. You should use the storage driver that is recommended by your preferred vendor and which is in line with policy around the applications which are being deployed.
Controls Version: v8
Control: 16 Application Software Security
Manage the security life cycle of in-house developed, hosted, or acquired software to prevent, detect, and remediate security weaknesses before they can impact the enterprise.
IG 1: IG 2: IG 3:
Controls Version: v7
Control: 18 Application Software Security
Application Software Security