Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0891_hardcoded-credentials
Adversaries may leverage credentials that are hardcoded in software or firmware to gain an unauthorized interactive user session to an asset.
Passed 19 of 21 test cases with the skill, and 11 of 21 without it.
and 7 more in the full report
8 fixed12 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
An incident responder is categorizing an OT breach where adversaries utilized built-in firmware SSH keys to maintain access across reboots. Which TA tactic identifier corresponds to the Persistence phase for this ICS technique?
| Checked | Without skill | With skill |
|---|---|---|
| Refers to TA0110 for Persistence | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may leverage credentials that are hardcoded in software or firmware to gain an unauthorized interactive user session to an asset. Examples credentials that may be hardcoded in an asset include:
Unlike Default Credentials, these credentials are built into the system in a way that they either cannot be changed by the asset owner, or may be infeasible to change because of the impact it would cause to the control system operation. These credentials may be reused across whole product lines or device models and are often not published or known to the owner and operators of the asset.
Adversaries may utilize these hardcoded credentials to move throughout the control system environment or provide reliable access for their tools to interact with industrial assets.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Hardcoded Credentials by examining operational technology systems and network architecture.
Review whether mitigations for T0891 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
test cases passed, vs 11 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.