Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0885_commonly-used-port
Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend in with normal network activity, to avoid more detailed inspection.
Passed 15 of 22 test cases with the skill, and 6 of 22 without it.
and 8 more in the full report
11 fixed4 passed either way5 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
When adversaries use standard web protocols for command and control inside an ICS network, security operations wants to know which specific TCP ports represent standard HTTP and HTTPS channels. List these two standard web protocol ports and identify the target platform classification for this technique.
| Checked | Without skill | With skill |
|---|---|---|
| Identifies TCP port 80 for HTTP traffic. | Passed | Passed |
| Identifies ICS as the target platform. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend in with normal network activity, to avoid more detailed inspection. They may use the protocol associated with the port, or a completely different protocol. They may use commonly open ports, such as the examples provided below.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Commonly Used Port by examining operational technology systems and network architecture.
Review whether mitigations for T0885 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
test cases passed, vs 6 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.