Your SlideShare is downloading. ×
0
ICS/SCADA/PLC Google/Shodanhq Cheat Sheet                     Special #SAS2013 release  Gleb Gritsai, Alexander Timorin, Y...
vendor             product                   google dork              network info                  passwordsSiemens    S7...
inurl:"Portal/Portal.mwsl"   http S7Web.cssAutomation License Manager                                   tcp/4410 (by vuln ...
intitle:"Miniweb Start Page" |SIMATIC HMI Miniweb   "/CSS/Miniweb.css"               http: /CSS/Miniweb.css               ...
telnet:Welcome to the Windows CE                                                          Telnet Service on HMI_Panel  ven...
Allen-BradleyRockwell Automation               ControlLogix                                                         tcp/ud...
SNMP                                                                     public/privatePM870SD                     Schneid...
Telnet                                       8600/0PowerLogic ION7650/7550     ION 7550                                   ...
PowerLogic E5600               PowerLogic Ethernet               Gateway (EGX)           EGX100                           ...
shodanhq: ClearSCADA                                      "ViewXCtrl is not supported in this                             ...
Upcoming SlideShare
Loading in...5
×

ICS/SCADA/PLC Google/Shodanhq Cheat Sheet v2

3,872

Published on

Published in: Technology

Transcript of "ICS/SCADA/PLC Google/Shodanhq Cheat Sheet v2"

  1. 1. ICS/SCADA/PLC Google/Shodanhq Cheat Sheet Special #SAS2013 release Gleb Gritsai, Alexander Timorin, Yuri Goltsev, Roman Ilin http://scadastrangelove.org/
  2. 2. vendor product google dork network info passwordsSiemens S7-200 SNMP all models: tcp/udp/102 public/private_ S7-300 snmp: Siemens, SIMATIC, S7 SNMP public/private S7-3** , PCS7 inurl:/Portal0000.htm http: /S7Web.css SNMP public/private snmp: Siemens, SIMATIC S7, CPU- SNMP Simatic S7 family 1200 public/private Siemens, SIMATIC S7, CPU317-2 Web PN/DP admin:<empty> Siemens, SIMATIC S7, CPU315-2 PN/DP Siemens, SIMATIC S7 ***
  3. 3. inurl:"Portal/Portal.mwsl" http S7Web.cssAutomation License Manager tcp/4410 (by vuln info)Scalance S,X Security Module firewall telnet: Simatic, Scalance snmp: Scalance S*, Scalance W*, SNMP Scalance X* public/private DCP protocol (by vuln info) tcp/80 netbios: WINCC_SRV21 <0x0> SNMP (panels) SIEMENS <0x0> public/privateWincc flexible WINCC_SRV21 <0x20> Web/ VNCWincc flexible runtime / TIA Portal tcp/2308 (by vuln info) Administrator:100 tcp/50523 (by vuln info)Synco OZW (Web server) http
  4. 4. intitle:"Miniweb Start Page" |SIMATIC HMI Miniweb "/CSS/Miniweb.css" http: /CSS/Miniweb.css Administrator:100 MS SQL WinCCAdmin:2WSXcde WinCCConnect:2WSXcdeSIMATIC WinCC rSimatic HMI snmp: Siemens, SIMATIC HMI, ***
  5. 5. telnet:Welcome to the Windows CE Telnet Service on HMI_Panel vendor product google dork network info deltavadmin:deltav DeltaV and DeltaV Workstations/DeltaVEmerson ProEssentials Scientific Graph tcp/udp/111 (by vuln info) DeltaV Service Information System Ver3.3 vendor product google dork network info
  6. 6. Allen-BradleyRockwell Automation ControlLogix tcp/udp/44818 , http CompactLogix intitle:"Rockwell Automation" "Device Name" "Uptime" PLC5 http, snmp inurl:dtm.html intitle:1747-L552 SLC-5 inurl:dtm.html intitle:1747-L551 http, snmp Micrologix inurl:home.htm intitle:1766 http, snmp vendor product shodanhq dork network infoSchneider Electric PM820SD Schneider Electric - PM820SD port:161
  7. 7. SNMP public/privatePM870SD Schneider Electric - PM870SD port:161ECC21 Schneider Electric - ECC21 port:161EGX100MG Schneider Electric - EGX100MG port:161PowerLogic PM800 PowerLogic PM800 port:80 HTTP Administrator/Gateway Guest/Guest SNMP public/privatePowerLogic ION8650 A/B/C ION8650 Telnet 8650/0PowerLogic ION8650 A/B/C) 8650 IONPowerLogic ION8600 8600 ION
  8. 8. Telnet 8600/0PowerLogic ION7650/7550 ION 7550 Telnet 7550/0PowerLogic ION7650/7550 ION 7650 Telnet 7650/0PowerLogic ION7300 ION 7300 Telnet 7300/0PowerLogic ION6200 ION6200PowerLogic PM1200 PM1200PowerLogic DM6200 DM6200Powerlogic EnerceptPowerlogic Energy MeterPowerLogic Branch CurrentMonitor BCM42PowerLogic EM4800
  9. 9. PowerLogic E5600 PowerLogic Ethernet Gateway (EGX) EGX100 HTTP Administrator/Gateway Guest/Guest SNMP public/private PowerLogic EGX300 EGX300 PowerLogic ION7550RTU ION 7550RTU schneider electric vendor product google dork network infoSchneider Electric Modicon intitle:"Quantum CPU Web Server" Quantum/Premiun/Micro intitle:"Premium CPU Web Server" intitle:"Citect Web" inurl:scada CitectSCADA filetype:htm CitectFacilities
  10. 10. shodanhq: ClearSCADA "ViewXCtrl is not supported in this web browser." ClearSCADA intitle:"ClearSCADA Home" UnitelWay Device Driver Vijeo Historian Web Server several products Modicon M340 snmp: "Modicon M340" vendor product google dork network infoGeneralElectric Cimplicity intitle:"CIMPLICITY WebView" inurl:main.html http Proficy inurl:ProficyPortal/default.asp http
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×