0x3 Modbus Security - Modbus Enumeration
Channel: Hack My Control System
Date: 2016-12-06

I believe this is one of the most comprehensive courses on enumerating Modbus! In this episode, we enumerate and modify devices' coils and registers; thus, bending them to do our will. All script syntax can be found at www.hackmycontrolsystem.com.

Follow me on Twitter: @hackingsdn

Show notes posted at http://www.hackmycontrolsystem.com

Slides available on: https://github.com/hackmycontrolsystem/modbus-security

Recommend Viewing:
Modbus Block Reads: https://www.youtube.com/watch?v=njGIaavgVwI
Introduccion qModbusMaster y ModbusPal: https://www.youtube.com/watch?v=oBXMpGRWeu8
Industrial Control Systems : Pentesting PLCs 101 (Part 1/2):https://www.youtube.com/watch?v=iGwm6-lyn2Y
Industrial Control Systems : Pentesting PLCs 101 (Part 2/2):https://www.youtube.com/watch?v=rP_Jys1_OJk

Recommended Reading:
Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets &amp; Solutions (2017), ISBN: 978-1-25-958971-3

References:
Webswitch: http://www.controlbyweb.com/webswitch/
Conpot: https://github.com/mushorg/conpot
ModbusPal: http://modbuspal.sourceforge.net/
Snort: http://blog.snort.org/2012/01/snort-292-scada-preprocessors.html
Digital Bond Modbus TCP Rules: https://github.com/digitalbond/quickdraw/blob/master/modbus.rules
http://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=20669
https://github.com/bashwork/pymodbus/issues/25
http://pymodbus.readthedocs.io/en/latest/library/sync-client.html?highlight=write_coil