Room: Attacking ICS Plant #1

Enlace a la sala: aquí

Task 1: Introduction to OT/ICS

No answer needed.
Simplemente hacer click en "Complete".

Task 2: Introduction to Modbus protocol

Which is the function used to read holding registers in pymodbus library?
read_holding_registers

Which is the function used to write holding registers in pymodbus library?
write_register

Task 3: Discovery

How many phases can we observe?
3

How many sensors can we observe?
2

How many actuators can we observe?
3

Using the script discovery.py, how many registers can we count?
16

After the plant is started and a bottle is loaded, how many registers are continuously changing their values?
4

Which is the minimum observed value?
0

Which is the maximum observed value?
1

Which registry is holding its value?
16

Which registries are set to 1 while the nozzle is filling a bottle?
2 4

Which registries are set to 1 while the roller is moving the bottles?
1 3

Which is the color of the water level sensor?
red

Which is the color of the bottle sensor?
green

If you observe the plant at the very beginning, which is the registry associated with the roller?
3

Based on the previous answer, which is the registry associated with the water level sensor?
1

Task 4: Play to learn

Which is the registry associated with the nozzle?
4

Task 5: Attack

Shutdown the plant and avoid the plant manager starts it again.
Simplemente hacer click en "Complete".

Start the plant, open the nozzle while bottles are moving.
Simplemente hacer click en "Complete".

Start the plant, open the nozzle and stop the rollet.
Simplemente hacer click en "Complete".

Repeat attack in question 1 abusing sensor registries.
Simplemente hacer click en "Complete".

Repeat attack in question 2 abusing sensor registries.
Simplemente hacer click en "Complete".

Repeat attack in question 3 abusing sensor registries.
Simplemente hacer click en "Complete".

 

Enlaces directos que aparecen en la sala:

Guide to Industrial Control Systems (ICS) Security (NIST 800-82)

Modbus 101 – Introduction to Modbus

Github de VirtuaPlant