用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-azure-compute-2-1-15命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
正在显示 SKILL.md
基于 SOC 职业分类
| name | cis-azure-compute-2.1.15 |
| description | Ensure App Service plan SKU supports private endpoints |
| category | cis-azure-compute |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","app-service","private-endpoint","sku","app-service-plan","network-security"] |
| cis_id | 2.1.15 |
| cis_benchmark | CIS Microsoft Azure Compute Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Ensure that your App Service plan SKU supports private endpoints. Private endpoints provide secure access over Azure Private Link, which keeps traffic on the Microsoft backbone network and eliminates exposure to the public internet. Note that not all SKUs support private endpoints.
An appropriately configured private endpoint eliminates public exposure and helps prevent data exfiltration.
App Service plan costs vary based on the selected SKU.
App Services.Properties pane, under Hosting, next to SKU and size, ensure that the plan tier is one of the following: Basic, Standard, ElasticPremium, Premium, PremiumV2, Premium0V3, PremiumV3, PremiumMV3, IsolatedV2, IsolatedMV2, WorkflowStandard, FlexConsumption, and that the plan name is one of the following: B1, B2, B3, S1, S2, S3, EP1, EP2, EP3, P1, P2, P3, P1V2, P2V2, P3V2, P0V3, P1V3, P2V3, P3V3, P1MV3, P2MV3, P3MV3, P4MV3, P5MV3, I1V2, , , , , , , , , , , , , , .I2V2I3V2I4V2I5V2I6V2I1MV2I2MV2I3MV2I4MV2I5MV2WS1WS2WS3FC1Run the following command to list apps:
az webapp list
For each app, run the following command to get the App Service plan ID:
az webapp show --resource-group <resource-group-name> --name <app-name> --query appServicePlanId
For each App Service plan, run the following command to get the plan SKU tier and name:
az appservice plan show --resource-group <resource-group-name> --name <app-service-plan-name> --query "{tier:sku.tier,name:sku.name}"
Ensure that the plan tier is one of the following: Basic, Standard, ElasticPremium, Premium, PremiumV2, Premium0V3, PremiumV3, PremiumMV3, IsolatedV2, IsolatedMV2, WorkflowStandard, FlexConsumption, and that the plan name is one of the following: B1, B2, B3, S1, S2, S3, EP1, EP2, EP3, P1, P2, P3, P1V2, P2V2, P3V2, P0V3, P1V3, P2V3, P3V3, P1MV3, P2MV3, P3MV3, P4MV3, P5MV3, I1V2, I2V2, I3V2, I4V2, I5V2, I6V2, I1MV2, I2MV2, I3MV2, I4MV2, I5MV2, WS1, WS2, WS3, FC1.
Run the following command to list apps:
Get-AzWebApp
Run the following command to get the app in a resource group with a given name:
$app = Get-AzWebApp -ResourceGroupName <resource-group-name> -Name <app-name>
Run the following command to get the App Service plan ID:
$app.ServerFarmId
Run the following command to get the App Service plan in a resource group with a given name:
$plan = Get-AzAppServicePlan -ResourceGroupname <resource-group-name> -Name <app-service-plan-name>
Run the following command to get the plan SKU tier and name:
$plan.Sku | select-object Tier, Name
Ensure that the plan tier and name match the supported values listed above. Repeat for each app.
The App Service plan SKU tier and name should be one that supports private endpoints (Basic or higher).
App Services.Properties pane, under Hosting, next to Name, click the App Service plan name.Current App Service plan, next to Name, click the App Service plan name.Essentials, next to Pricing plan, click the pricing plan name.Basic, Standard, ElasticPremium, Premium, PremiumV2, Premium0V3, PremiumV3, PremiumMV3, IsolatedV2, IsolatedMV2, WorkflowStandard, FlexConsumption, and the plan name is one of the supported values.Select.Downgrade or Upgrade to confirm the change.For each App Service plan requiring remediation, run the following command to update the SKU:
az appservice plan update --resource-group <resource-group-name> --name <app-service-plan-name> --sku <sku>
Not specifically documented for this control.
The App Service plan is selected during creation.
Level 2 | Automated