论坛 › 工控物联网安全::『Internet of things security』 › 原创---看我如何利用工控的一个漏洞黑遍全世界工控

admin 发表于 2023-11-28 16:37:20

原创---看我如何利用工控的一个漏洞黑遍全世界工控

<p align="left" style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:left;text-indent:24.0pt;text-justify:inter-ideograph;">
        <span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">一、构思计划<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">首先想着，既然<span style="background:#FF4C00;color:black;">工业控制系统不可避免要与互联网联网</span>，那再说难免肯定有一些系统会以<span lang="EN-US">http</span>的方式开放在互联网上，那么就了想法，试着通过使用<span lang="EN-US">360queke</span>进行全世界搜索，因为<span lang="EN-US">fofa</span>我没发现有这功能，也可能是我没发现，于是乎，就百度资料，那你<span style="background:#AC39FF;color:black;">肯定不可能所有的<span lang="EN-US">http</span>都是工控</span>呀，所以百度了一下工控的各种协议，网上搜索资料，找到了<span lang="EN-US">modbus</span>协议，开放端口是<span lang="EN-US">502</span>，试着照着网上的教程搜索了一下，如下面命令<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;margin-bottom:18.0pt;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US" style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">ports:"80,502" AND services:"http,modbus"</span><span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">，找到了<span lang="EN-US">6W</span>多条哈哈，<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="264" src="http://cobjon.com/w/php/upload/202311/28/50123b62.png" alt="" style="vertical-align:middle;" /><span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">一晚上测试了<span lang="EN-US">5W</span>条，然后导出的时候记得只导出<span lang="EN-US">ip</span>，测试效果图如下</span><span style="font-family:MS Gothic;font-size:13.0pt;letter-spacing:.45pt;"></span><span lang="EN-US" style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US" style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US" style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">二、成果图如下<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="409" src="http://cobjon.com/w/php/upload/202311/28/09cc87bb.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="381" src="http://cobjon.com/w/php/upload/202311/28/4268ce39.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="417" src="http://cobjon.com/w/php/upload/202311/28/aabe217f.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="376" src="http://cobjon.com/w/php/upload/202311/28/1f0e15f7.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="275" src="http://cobjon.com/w/php/upload/202311/28/8766a588.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="278" src="http://cobjon.com/w/php/upload/202311/28/913366c5.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">三、总结<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span style="font-family:Microsoft YaHei UI,sans-serif;font-size:13.0pt;letter-spacing:.45pt;">基本上就是照猫画虎，以前打工控都是直接从外网打进内网以后发现有<span lang="EN-US">SCADA</span>主机，这次是直接从互联网工控<span lang="EN-US">http web</span>端开搞，尽管没有拿到权限，但是单从大全世界工控来说，哥算是扬名立万的第一步哈哈，开个玩笑，感谢大家观看，后来会持续更新工控方面的渗透文章。。<span lang="EN-US"></span></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="395" src="http://cobjon.com/w/php/upload/202311/28/ff9e2adf.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="338" src="http://cobjon.com/w/php/upload/202311/28/32c54bf4.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="233" src="http://cobjon.com/w/php/upload/202311/28/c70380b0.png" alt="" style="vertical-align:middle;" /><span lang="EN-US">\</span><span lang="EN-US" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"> </span><img width="554" height="279" src="http://cobjon.com/w/php/upload/202311/28/746b6846.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="249" src="http://cobjon.com/w/php/upload/202311/28/9e8fe9b3.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="391" src="http://cobjon.com/w/php/upload/202311/28/0e106f40.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="355" src="http://cobjon.com/w/php/upload/202311/28/45078204.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="375" src="http://cobjon.com/w/php/upload/202311/28/0c98cf97.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="275" src="http://cobjon.com/w/php/upload/202311/28/a6000b96.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="282" src="http://cobjon.com/w/php/upload/202311/28/fbda46b9.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="370" src="http://cobjon.com/w/php/upload/202311/28/689ba069.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="345" src="http://cobjon.com/w/php/upload/202311/28/921922d8.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="264" src="http://cobjon.com/w/php/upload/202311/28/a22ee01d.png" alt="" style="vertical-align:middle;" /><span lang="EN-US"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="554" height="255" src="http://cobjon.com/w/php/upload/202311/28/1b17b013.png" alt="" style="vertical-align:middle;" /><span lang="EN-US" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"><span>&nbsp;</span></span><img width="553" height="233" src="http://cobjon.com/w/php/upload/202311/28/a5732e36.png" alt="" style="vertical-align:middle;" /><span lang="EN-US" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"><span>&nbsp;</span></span><img width="553" height="293" src="http://cobjon.com/w/php/upload/202311/28/fa2ae04d.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"><span>&nbsp;</span></span><img width="553" height="275" src="http://cobjon.com/w/php/upload/202311/28/ab9f6174.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"><span>&nbsp;</span></span><img width="554" height="269" src="http://cobjon.com/w/php/upload/202311/28/25f2c674.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"><span>&nbsp;</span></span><img width="553" height="324" src="http://cobjon.com/w/php/upload/202311/28/b779b818.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <img width="553" height="259" src="http://cobjon.com/w/php/upload/202311/28/4e490c62.png" alt="" style="vertical-align:middle;" /><span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;">&nbsp;</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="X-NONE" style="background:black;border:none black 1.0pt;color:black;font-family:Times New Roman,serif;font-size:0pt;layout-grid-mode:line;padding:0cm;">Kaikai </span><span lang="EN-US"></span>
</p>

查看完整版本: 原创---看我如何利用工控的一个漏洞黑遍全世界工控