S4x13 presentation slides: SCADA under X-rays

Download from qqlan

S4x13 Releases: S7 password offline bruteforce tool

As you know S7 protocol, used to communication between Engineering Stations, SCADA, HMI and PLC can be protected by password.




On-line authentication is a simple challenge-response protocol.

• Password hashed (SHA1) on client (TIA Portal)
• Server (PLC) provide 20 byte challenge
• Client calculate HMAC-SHA1(challenge, SHA1(password) as response

Enjoy our special S4x13 release by Alexander Timorin, Dmitry Sklyarov
Parameters are hardcoded, sorry.
 

cfg_pcap_file = 'path to .pcap file'
cfg_dictionary_file = 'path to dictionary file'

Feel free to contribute.

Download link: http://pastebin.com/0G9Q2k6y

S4x13 Releases: WinCC Flexible Security Hardening Guide

Special release for Scada Security Scientific Symposium (http://www.digitalbond.com/s4/) 

WinCC Flexible (TIA Portal) Security Hardening Guide

Table of content

OS CONFIGURATION
DBMS СONFIGURATION
ADDITIONAL MEANS OF PROTECTION
RUNTIME SECURITY SETTINGS
SIMATIC SIEMENS WINCC FLEXIBLE ACCESS SETTINGS
SM@RTSERVER SECURITY SETTINGS
MINIWEB (HTTP) SECURITY SETTINGS
OPC SERVER SECURITY SETTINGS
WEB SERVICE (SOAP) SECURITY SETTINGS
SMTP SECURITY SETTINGS
LOGGING
PROJECT MANAGEMENT
WEB SERVER: HTML PAGES

Download link

PS. *-Rays and Engineer Garin is our new hero. Enjoy.