Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1631_process-injection
Adversaries may inject code into processes in order to evade process-based defenses or even elevate privileges.
Passed 20 of 23 test cases with the skill, and 8 of 23 without it.
and 12 more in the full report
12 fixed8 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which Mobile ATT&CK tactic ID should be assigned to Privilege Escalation for mobile process injection (T1631), given that Enterprise Privilege Escalation uses TA0004?
| Checked | Without skill | With skill |
|---|---|---|
| Identify TA0029 as the tactic ID for Privilege Escalation. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may inject code into processes in order to evade process-based defenses or even elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Both Android and iOS have no legitimate way to achieve process injection. The only way this is possible is by abusing existing root access or exploiting a vulnerability.
Platforms: Android, iOS
Determine if the target mobile environment is susceptible to Process Injection by examining the target platforms (Android, iOS).
Review whether mitigations for T1631 are in place. If defenses are absent or misconfigured, this technique may be exploitable.
No specific mitigations documented for this technique.
test cases passed, vs 8 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.