Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1560.002_archive-via-library
An adversary may compress or encrypt data that is collected prior to exfiltration using 3rd party libraries.
Passed 18 of 22 test cases with the skill, and 10 of 22 without it.
and 6 more in the full report
8 fixed10 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
Provide a one-line Python command to simulate library-based file compression using bz2 on Linux. The test should read an input file in binary mode, apply bz2 compression at level 9, and write the string representation of the compressed data to an output file.
| Checked | Without skill | With skill |
|---|---|---|
| Calls bz2.compress on content with compresslevel=9. | Passed | Passed |
| Opens the output file in 'w+' mode to write compressed output. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1560
An adversary may compress or encrypt data that is collected prior to exfiltration using 3rd party libraries. Many libraries exist that can archive data, including Python rarfile , libzip , and zlib . Most libraries include functionality to encrypt and/or compress data.
Some archival libraries are preinstalled on systems, such as bzip2 on macOS and Linux, and zip on Windows. Note that the libraries are different from the utilities. The libraries can be linked against when compiling, while the utilities require spawning a subshell, or a similar execution mechanism.
Platforms: Linux, macOS, Windows
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Uses GZip from Python to compress files
Supported Platforms: linux
which_python=`which python || which python3`
$which_python -c "import gzip;input_file=open('#{path_to_input_file}', 'rb');content=input_file.read();input_file.close();output_file=gzip.GzipFile('#{path_to_output_file}','wb',compresslevel=6);output_file.write(content);output_file.close();"
test cases passed, vs 10 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.