Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1201_password-policy-discovery
Adversaries may attempt to access detailed information about the password policy used within an enterprise network or cloud environment.
Passed 22 of 23 test cases with the skill, and 19 of 23 without it.
and 1 more in the full report
3 fixed19 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our legacy audit compliance suite is auditing CentOS 6 systems for password complexity enforcement rules. Some reviewers think only pwquality.conf exists on CentOS 6, but legacy RHEL 6 setups require checking pam system authentication files as well. What two file paths must be inspected to verify CentOS 6 password complexity?
| Checked | Without skill | With skill |
|---|---|---|
| Includes /etc/pam.d/system-auth in the required files. | Passed | Passed |
| Includes /etc/security/pwquality.conf in the required files. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may attempt to access detailed information about the password policy used within an enterprise network or cloud environment. Password policies are a way to enforce complex passwords that are difficult to guess or crack through Brute Force. This information may help the adversary to create a list of common passwords and launch dictionary and/or brute force attacks which adheres to the policy (e.g. if the minimum password length should be 8, then not trying passwords such as 'pass123'; not checking for more than 3-4 passwords per account if the lockout is set to 6 as to not lock out accounts).
Password policies can be set and discovered on Windows, Linux, and macOS systems via various command shell utilities such as net accounts (/domain), Get-ADDefaultDomainPasswordPolicy, chage -l , cat /etc/pam.d/common-password, and pwpolicy getaccountpolicies . Adversaries may also leverage a Network Device CLI on network devices to discover password policy information (e.g. show aaa, show aaa common-criteria policy all).
Password policies can be discovered in cloud environments using available APIs such as GetAccountPasswordPolicy in AWS .
Platforms: Windows, Linux, macOS, IaaS, Network Devices, Identity Provider, SaaS, Office Suite
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Lists the password complexity policy to console on Ubuntu Linux.
Supported Platforms: linux
cat /etc/pam.d/common-password
test cases passed, vs 19 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.