Internet connected ICS/SCADA/PLC|30C3 release

Trying to find SCADA/PLC/HMI in Internet?
No success?

SCADAStrangeLove strike forces to the rescue!

With our Pretty Shiny Sparkly™ ICS/SCADA/PLC Cheat Sheet you will become real SCADAHacker and will search for SCADA for free! Special #30C3 release by Gleb Gritsai, Alexander Timorin, Alexander Zaitsev, Sergey Gordeychik, Valentin Shilnenkov.

Please enjoy responsible!

Hydra vs Siemens S7-300|30C3 release

Special release for Chaos Communication Congress: Hydra v7.6 with Siemens S7-300 PLC password bruteforce module and dictionary. Thanks to Alexander Timorin and Van Hauser.

Download and enjoy.

PS. More details tomorrow.

SCADA hacking @30C3

Anniversary Chaos Communication Congress going to be awesome.
We cannot stand aside. SCADA StrangeLove crowd will rock there.
Gleb Gritsai and Sergey Gordeychik will talk about thing “We already know”, but a lot of thing “We don’t know yet…”.

Yury Goltsev  and Alexander Zaitsev  on Day 3 will speak about PHDays Labyrinth.
WTF PHDays Labyrinth? It is a magic. Hacker’s Disneyland. Here it is.

SCADA Explosure 2013 Report

Awesome report and ICS/SCADA/PLC Google/Shodanhq Cheat Sheet. Thanks to ISGroup SRL and Francesco Ongaro for reference.

http://www.scadaexposure.com/report/2013-11

SCADA Security Deep Inside

Members of SCADA StrangeLove Gleb Gritsai and Alexander Tlyapov gave a talk at Zeronights conference @Moscow. New slides were splitted into two parts:
 - Industrial protocols (MMS and IEC 104) and how to act during a penetration testing of ICS enviroment with this protocols
- Patched WinCC vulnerabilities discovered by SCADA SL group including Alexander's results of deep reverse engineering of solution

We'd like to thank attendees for their questions and interest in topic. This year showed there is a room for organizational improvements, but the conference talks and the community compensate any negative impressions. Kudos to the organizers of the Zeronights conference for bringing up this international security event and giving us a chance to speak there.

What hack may come

Last week four guys of the SCADA StrangeLove team took part in Power of Community conference in Seoul, South Korea.
Alexander Timorin, Yuri Goltsev and Ilya Karpov run Choo Choo PWN challenge and workshop, and Sergey Gordeychik spoke on automatic exploit generation.






Choo Choo PWN challenge was built for PHDays III and it was the first time it was presented in Korea.

Power of Community 2013 special release of ICS/SCADA toolkit

Special release of ICS/SCADA toolkit for our speech and workshop at Power of Community conference. Lets play with industrial protocols: S7, Profinet, IEC-60870-5-104, iec-61850-8-1 !

Download

Enjoy...