Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1059.011_lua
Adversaries may abuse Lua commands and scripts for execution.
Passed 22 of 24 test cases with the skill, and 18 of 24 without it.
and 1 more in the full report
4 fixed18 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
How many recognized MITRE mitigations are formally mapped in the T1059.011 remediation guidelines?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies that exactly 3 mitigations are documented | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1059
Adversaries may abuse Lua commands and scripts for execution. Lua is a cross-platform scripting and programming language primarily designed for embedded use in applications. Lua can be executed on the command-line (through the stand-alone lua interpreter), via scripts (.lua), or from Lua-embedded programs (through the struct lua_State).
Lua scripts may be executed by adversaries for malicious purposes. Adversaries may incorporate, abuse, or replace existing Lua interpreters to allow for malicious Lua command execution at runtime.
Platforms: Linux, Network Devices, Windows, macOS
Identify Attack Surface: Determine if the target environment is susceptible to Lua by examining the target platforms (Linux, Network Devices, Windows).
Assess Existing Defenses: Review whether mitigations for T1059.011 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Execute Test: Use tools and methods described in the MITRE ATT&CK page and external references below.
Note: No Atomic Red Team tests available for this technique. See Atomic Red Team GitHub for updates.
test cases passed, vs 18 / 24 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.