Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1626_abuse-elevation-control-mechanism
Adversaries may circumvent mechanisms designed to control elevated privileges to gain higher-level permissions.
Passed 18 of 22 test cases with the skill, and 12 of 22 without it.
and 7 more in the full report
8 fixed10 passed either way2 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
For cross-referencing our mobile threat matrix with government threat catalogs, team members suggested referencing NIST SP 800-163 or NIST APP-01. What specific entry from the NIST Mobile Threat Catalogue corresponds to this technique?
| Checked | Without skill | With skill |
|---|---|---|
| References NIST Mobile Threat Catalogue APP-22. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may circumvent mechanisms designed to control elevated privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can gain on a machine. Authorization has to be granted to specific users in order to perform tasks that are designated as higher risk. An adversary can use several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Platforms: Android
Determine if the target mobile environment is susceptible to Abuse Elevation Control Mechanism by examining the target platforms (Android).
Review whether mitigations for T1626 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
Applications very rarely require administrator permission. Developers should be cautioned against using this higher degree of access to avoid being flagged as a potentially malicious application.
test cases passed, vs 12 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.