Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0871_execution-through-api
Adversaries may attempt to leverage Application Program Interfaces (APIs) used for communication between control software and the hardware.
Passed 20 of 22 test cases with the skill, and 4 of 22 without it.
and 22 more in the full report
16 fixed4 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 16 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are standardizing threat assessment documentation across our power generation facilities. When evaluating an unmitigated Execution through API finding on SCADA controllers, what kill chain phase and severity level should be recorded?
| Checked | Without skill | With skill |
|---|---|---|
| Categorize the finding under the Execution kill chain phase (TA0104). | Passed | Passed |
| Record the finding severity as Low. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may attempt to leverage Application Program Interfaces (APIs) used for communication between control software and the hardware. Specific functionality is often coded into APIs which can be called by software to engage specific functions on a device or other software.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Execution through API by examining operational technology systems and network architecture.
Review whether mitigations for T0871 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Minimize the exposure of API calls that allow the execution of code.
All APIs used to perform execution, especially those hosted on embedded controllers (e.g., PLCs), should provide adequate authorization enforcement of user access. Minimize user's access to only required API calls.
test cases passed, vs 4 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.