Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0819_exploit-public-facing-application
Adversaries may leverage weaknesses to exploit internet-facing software for initial access into an industrial network.
Passed 21 of 23 test cases with the skill, and 6 of 23 without it.
and 18 more in the full report
15 fixed6 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 15 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are compiling a threat matrix report for our executive board regarding internet-exposed ICS portals. Which MITRE ATT&CK for ICS Kill Chain Phase name and Phase ID does technique T0819 belong to, and what is the severity rating?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies TA0108 as the Kill Chain Phase ID. | Passed | Passed |
| Categorizes the technique phase as Initial Access. | Passed | Passed |
| Rates the finding severity as High. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may leverage weaknesses to exploit internet-facing software for initial access into an industrial network. Internet-facing software may be user applications, underlying networking implementations, an assets operating system, weak defenses, etc. Targets of this technique may be intentionally exposed for the purpose of remote management and visibility.
An adversary may seek to target public-facing applications as they may provide direct access into an ICS environment or the ability to move into the ICS network. Publicly exposed applications may be found through online tools that scan the internet for open ports and services. Version numbers for the exposed application may provide adversaries an ability to target specific known vulnerabilities. Exposed control protocol or remote access ports found in Commonly Used Port may be of interest by adversaries.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Exploit Public-Facing Application by examining operational technology systems and network architecture.
Review whether mitigations for T0819 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Regularly scan externally facing systems for vulnerabilities and establish procedures to rapidly patch systems when critical vulnerabilities are discovered through scanning and public disclosure.
Regularly scan externally facing systems for vulnerabilities and establish procedures to rapidly patch systems when critical vulnerabilities are discovered through scanning and public disclosure.
test cases passed, vs 6 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.