SCADA Strangelove @29c3

Our speech at Chaos Communication Congress #29C3.

Starts at 8:55.

 

Slides

ICS/SCADA/PLC Google/Shodan Cheat Sheet

Trying to find SCADA/PLC/HMI in Internet?
No success?

SCADAStrangeLove strike forces to the rescue!

With our Pretty Shiny Sparkly™ ICS/SCADA/PLC Google/Shodanhq Cheat Sheet you will become real SCADAHacker and search for  SCADA with Shodan for free!
Forget about "effective" CVSS score - only Google, only hardcore! Get Siemens S7 PLCs, Scalance S, WinCC, Emerson DeltaV and Schneider Electric PowerLogic in one click!
Special #29C3 release by Gleb Gritsai, Alexander Timorin, Yuri Goltsev, Roman Ilin.

Enjoy: http://www.slideshare.net/qqlan/icsscadaplc-googleshodanhq-cheat-sheet

SIEMENS SIMATIC WINCC 7.X SECURITY HARDENING GUIDE

Special release for 29C3.

Contents.

OPERATING SYSTEM CONFIGURATION    SYSTEM NETWORK PARAMETERS CONFIGURATION
DBMS CONFIGURATION
ADDITIONAL SECURITY TOOLS
SIMATIC WINCC (SYSTEM PARAMETERS)
SIMATIC WINCC (SIMATIC LOGON CONFIGURATIONS)
SIMATIC WINCC (ACCESS CONFIGURATIONS)
SIMATIC WINCC (EVENTS LOGGING)
SIMATIC WINCC (PROJECT CONTROL)
SIMATIC WINCC (WEBNAVIGATOR — SCREEN PUBLISHING)

Hope you'll find it useful.  Any feedback is highly appreciated.

Download link: http://www.slideshare.net/qqlan/positive-technologies-wincc-security-hardening-guide

Special thanks to: Roman Ilin, Sergey Gordeychik, Ilya Karpov


Happy New Year!

SCADA and Chaos

Our team will participate 29th Chaos Communication Congress. Sergey Gordeychik, Gleb Gritsai and  Denis Baranov will talk about our new researches in  ICS security and vulnerabilities in SCADA and PLC systems. 

Please find speech description and schedule here:

 http://events.ccc.de/congress/2012/Fahrplan/events/5059.en.html

Yuri Goltsev and Segey Scherbel will drive on 29C3 $natch (Snatch) competition, real-time internet banking hacking contest. Please join and show your skills: http://events.ccc.de/congress/2012/wiki/$natch.

See you in Hambur!

PS. Full 29C3 agenda and 29C3 schedule for workshops:
http://events.ccc.de/congress/2012/Fahrplan/

http://events.ccc.de/congress/2012/wiki/Workshops