用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-apache24-4-2命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
基于 SOC 职业分类
| name | cis-apache24-4.2 |
| description | Ensure Appropriate Access to Web Content Is Allowed |
| category | cis-apache |
| version | 2.3.0 |
| author | cyberstrike-official |
| tags | ["cis","apache","linux","access-control"] |
| cis_id | 4.2 |
| cis_benchmark | CIS Apache HTTP Server 2.4 Benchmark v2.3.0 |
| tech_stack | ["linux","apache"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
In order to serve Web content, either the Apache Allow directive or the Require directive will need to be used to allow for appropriate access to directories, locations and virtual hosts that contain web content.
Either the Allow or Require directives may be used within a directory, a location or other context to allow appropriate access. Access may be allowed to all, or to specific networks, or hosts, or users as appropriate. The Allow/Deny/Order directives are deprecated and should be replaced by the Require directive. It is also recommended that either the Allow directive or the Require directive be used, but not both in the same context.
Perform the following to determine if the recommended state is implemented:
httpd.conf and any included configuration files) to find all <Directory> and <Location> elements.Use the deprecated Order/Deny/Allow method:
Order directive with the value of Deny,Allow for each.Allow and Deny directives, have values that are appropriate for the purposes of the directory.Use the Require method:
Order/Deny/Allow directives are NOT used for the directory.The following command may be useful to extract <Directory> and <Location> elements and Allow directives from the Apache configuration files.
# perl -ne 'print if /^ *<Directory */i .. //<\/Directory>/i'
$APACHE_PREFIX/conf/httpd.conf $APACHE_PREFIX/conf.d/*.conf
# perl -ne 'print if /^ *<Location */i .. //<\/Location>/i'
$APACHE_PREFIX/conf/httpd.conf $APACHE_PREFIX/conf.d/*.conf
# grep -i -C 6 -i 'Allow[[:space:]|]from' $APACHE_PREFIX/conf/httpd.conf
$APACHE_PREFIX/conf.d/*.conf
Perform the following to implement the recommended state:
httpd.conf and any included configuration files) to find all <Directory> and <Location> elements. There should be one for the document root and any special purpose directories or locations. There are likely to be access control directives in other contexts, such as virtual hosts or special elements like <Proxy>.Require directives, with values that are appropriate for the purposes of the directory.The configurations below are just a few possible examples.
<Directory "/var/www/html/">
Require ip 192.169.
</Directory>
<Directory "/var/www/html/">
Require all granted
</Directory>
<Location /usage>
Require local
</Location>
<Location /portal>
Require valid-user
</Location>
The following is the default Web root directory configuration:
<Directory "/usr/local/apache2/htdocs">
. . .
Require all granted
. . .
</Directory>
Controls Version: v8
Controls Version: v7