The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a password hash instead of a password for authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK”, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information by intercepting network traffic.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” involves bypassing authentication by using an alternative path or channel, allowing attackers to circumvent existing security mechanisms.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Network MapperNMAP를 사용한 ICS/SCADA 네트워크의 능동 스캐닝 및 정보 수집 터키어 이 연구 논문은 이전에 이미 발표된 바 있으며, 원본 .pdf 버전은 여기에서도 확인할 수 있습니다...

recon-skills

🛡️ 리콘 & 펜테스트 스킬 팩 리콘 및 펜테스트를 위한 공격형 보안 스킬 169개. 600개 이상의 기업 타깃 과 45개 이상의 섹터 전반에 걸쳐 실전 검증된 기법입니다. 브라우저 핑거프린트 우회, 안티봇 우회, 하드코딩 자격 증명 탐색, SCADA/ICS 열거 기능이 업데이트되었습니다. 📖 블로그 및 연구 : hiago.sh — 펜테스트 플레이북, 현장 노트, 툴링 📦 구성 내용 스킬 169개 recon-skills/ ├── SOUL.md — Philosophy & agent operating instructions ├──...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 ハードコードされた認証情報 CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt Changelog v7.0.46 ----------------- - fix of possible vulnerability as described here...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

CVE-2021-26828-Ultimate

ScadaFlare - CVE-2021-26828 인증된 RCE 익스플로잇 툴킷 ScadaBR 1.1.0을 대상으로 하는 모듈식 인증 후 RCE 익스플로잇으로, 레드팀 작업을 위해 강화되었습니다. 기능 무기화된 .jsp 셸을 viewedit.shtm을 통해 업로드합니다. Linux 및 Windows 페이로드 지원 SOCKS5 / HTTP 프록시 지원 리버스 셸 트리거 표준 또는 base64 열거 모듈 DB, 자격 증명, Log4Shell 등 웹훅 유출 Slack / Discord Metasploit 리소스 스크립트 생성 정리 ...

SCADAShutdownTool

SCADA 종료 도구 SCADA 보안 테스트 도구 SCADAShutdownTool은 산업 제어 시스템 자동화 및 테스트 도구로, 보안 연구자와 전문가가 SCADA 보안 시스템을 테스트하고, 슬레이브 컨트롤러를 열거하며, 컨트롤러의 레지스터 값을 읽고 레지스터 데이터를 다시 쓰도록 해줍니다. SCADAShutdownTool은 코일 출력, 디지털 입력, 아날로그 입력, 홀딩 레지스터 및 확장 레지스터를 포함한 모든 레지스터 유형의 열거를 허용합니다. SCADAShutdownTool은 다양한 모드로 실행될 수 있습니다:...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources IoT, 임베디드, 산업용 및 자동차 시스템을 위한 보안 연구 및 익스플로잇 기법. !https://img.shields.i...

ICS-TestBed-Framework

ICS TestBed Framework 로컬또는 원격에서 SCADASupervisory Control And Data Acquisition 네트워크를 복제하는 다수의 가상 머신을 자동으로 배포하기 위한 확장 가능한 프레임워크를 제안합니다. 여기에는 센서와 액추에이터를 에뮬레이션하는 여러 가상 호스트와, 호스트를 제어하는 HMIHuman Machine Interface가 포함됩니다. 제시된 프레임워크는 RTURemote Terminal Unit, HMI 또는 데이터 히스토리언Data Historian 역할을 하도록 사전 구성된 ...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0은 공격자가 관리자 권한을 가진 경우 원격 코드 실행을 허용합니다. 악성 C 스크립트를 작성하여 서버에서 실행합니다. 기본적으로 포트 8101의 관리자 제어판에 있는 서버 설정을 통해. 사용 방법: python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd "shutdown /s /t 30" PoC:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...