ICS NMAP #8 : DNP3 Enumeration DNP3 (Distributed Network Protocol version 3) is a widely used communications protocol in the field of industrial automation, particularly in the utility sector for supervisory control and data acquisition (SCADA) systems. However, it's important to note that DNP3 itself is not specific to PLCs but rather serves as a protocol for communication between various devices, including PLCs, RTUs (Remote Terminal Units), and SCADA systems. DNP3 provides robust and reliable communication over both serial and IP networks, with features like time synchronization, event reporting, and error detection. It's highly resilient to noisy and unreliable communication channels, making it suitable for use in challenging industrial environments. Additionally, DNP3 supports advanced security features such as authentication, encryption, and data integrity checks, ensuring the confidentiality and integrity of critical infrastructure systems. NMAP script : nmap --script dnp3-info -p 20000 10.10.10.10 #IoT #nmap #dnp3 #OT #pentesting ... https://www.youtube.com/watch?v=OStNMAUDP1c

CVE-2023-34039 ,Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI. Fofa query: "VMWare Aria" Target Enum: nuclei -t CVE-2023-34039.yaml -u 10.10.10.10 Exploit: python3 exploit.py -t http://10.10.10.10. https://github.com/sinsinology/CVE-2023-34039 #cve-2023-34039 #auth_bypass #vmware ... https://www.youtube.com/watch?v=v5E_T5EkG3I

ICS NMAP #1 : OMRON FINS Enumeration The Omron protocol is a communication standard used to exchange data between Omron programmable logic controllers (PLCs) and other devices. PLCs are industrial computers used to automate processes in manufacturing, controlling machinery and equipment. Omron PLCs utilize various programming languages and communication protocols to interact with sensors, actuators, and other devices in industrial settings. The Omron protocol facilitates reliable and efficient data exchange, enabling seamless integration and control of automation systems. NMAP script : nmap --script omron-info -sU -p 9600 10.10.10.10 #IoT #nmap #omron #pentesting ... https://www.youtube.com/watch?v=E9EZCwh3xpU

Shortscan is designed to quickly determine which files with short filenames exist on an IIS webserver. Once a short filename has been identified the tool will try to automatically identify the full filename. All credit goes to the original creator , github repo available in the video. Use responsibly. Fofa query:server="Microsoft-IIS" Exploit: shortscan target-ip -F #IIS #shortscan #enumeration ... https://www.youtube.com/watch?v=Bd_POCmv3Fs