All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills0 installs16,544 views
- Cis Ubuntu1404 V210 1 1 18Ensure nosuid option is set on removable media partitions to prevent privileged programsVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 19Ensure noexec option is set on removable media partitions to prevent executable binariesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 2Ensure a separate partition exists for /tmp to prevent resource exhaustionVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 20Ensure sticky bit is set on all world-writable directories to prevent unauthorized file deletionVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 21Disable autofs to prevent automatic mounting of removable media devicesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 3Ensure nodev option is set on /tmp partition to prevent special device accessVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 4Ensure nosuid option is set on /tmp partition to prevent setuid file creationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 5Ensure a separate partition exists for /var to prevent resource exhaustionVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 6Ensure a separate partition exists for /var/tmp to prevent resource exhaustionVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 7Ensure nodev option is set on /var/tmp partition to prevent special device accessVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 8Ensure nosuid option is set on /var/tmp partition to prevent setuid file creationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 1 9Ensure noexec option is set on /var/tmp partition to prevent executable binariesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 2 1Verify that package manager repositories are properly configured to receive latest patches and updatesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 2 2Verify that GPG keys are configured for package manager to ensure package integrityVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 3 1Verify that AIDE file integrity checking tool is installed for filesystem monitoringVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 3 2Verify that filesystem integrity checking is scheduled via cron to detect unauthorized changesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 4 1Verify that permissions on grub bootloader configuration are restricted to root onlyVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 4 2Verify that a bootloader password is set to prevent unauthorized boot parameter changesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 4 3Verify that authentication is required when booting into single user modeVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 5 1Verify that core dumps are restricted to prevent information disclosure from memory dumpsVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 5 2Verify that XD/NX (Execute Disable/No Execute) CPU protection is enabled to prevent buffer overflow exploitationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 5 3Verify that ASLR is enabled to randomize process memory layout and mitigate exploitsVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 5 4Verify that prelink is disabled to prevent interference with AIDE integrity checkingVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 1 1Verify that SELinux is not disabled via GRUB bootloader parametersVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 1 2Verify that SELinux is set to enforcing mode for mandatory access controlVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 1 3Verify that SELinux policy is configured to meet or exceed the default targeted policyVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 1 4Verify that no daemons are running unconfined outside of SELinux policy restrictionsVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 2 1Verify that AppArmor is not disabled via GRUB bootloader parametersVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 2 2Verify that all AppArmor profiles are loaded and in enforcing mode with no unconfined processesVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 6 3Verify that either SELinux or AppArmor mandatory access control system is installedVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 1Verify that /etc/motd does not contain OS version or system information that could aid attackersVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 2Verify that /etc/issue local login banner does not contain OS version informationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 3Verify that /etc/issue.net remote login banner does not contain OS version informationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 4Verify that /etc/motd has correct ownership and permissions to prevent unauthorized modificationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 5Verify that /etc/issue has correct ownership and permissions to prevent unauthorized modificationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 1 6Verify that /etc/issue.net has correct ownership and permissions to prevent unauthorized modificationVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 7 2Verify that GDM graphical login banner is configured with appropriate warning messageVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 1 8Verify that all available updates, patches, and security software are installed on the systemVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 1Verify that chargen inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 10Verify that the xinetd super daemon is disabled when not requiredVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 11Verify that openbsd-inetd package is not installed on the systemVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 2Verify that daytime inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 3Verify that discard inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 4Verify that echo inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 5Verify that time inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 6Verify that rsh, rlogin, and rexec inetd services are disabledVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 7Verify that talk inetd services are disabled to reduce attack surfaceVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 8Verify that telnet inetd service is disabled to prevent cleartext credential exposureVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 1 9Verify that tftp inetd service is disabled to prevent unauthenticated file transfersVotes: 0GitHub stars: 2,182
- Cis Ubuntu1404 V210 2 2 1 1Verify that NTP or chrony is installed for system time synchronizationVotes: 0GitHub stars: 2,182