An OT Cyber attack simulation on a chemical plant
summary
A live lab demonstrates a purchasable VM stack (Fortified graphical realism) that simulates a chemical plant, exposes Modbus traffic, and lets an attacker read and write registers via Wireshark captures, ARP spoofing from Kali, and a Metasploit modbus client; queries generated with ChatGPT plus Shodan find internet‑exposed HMIs; the demo changes setpoints and trips the simulated boiler—proof of concept works end‑to‑end and shows how trivial tooling maps to physical‑process impact.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 5:40Understanding operational technology systems
- 11:58Purdue model explained
- 14:47Common OT attack surfaces
- 17:16Finding OT assets with Shodan & AI
- 25:23Modbus protocol analysis
- 32:16Chemical plant simulation setup
- 37:12ARP spoofing on HMI demo
- 41:56Malicious commands via Metasploit
- 43:01Q&A
related talks
51mIndustrial Control Systems : Pentesting PLCs 101 (Part 2/2)
32mFaking a Factory: Creating and Operating a Realistic Honeypot
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
58mIndustrial Control Systems : Pentesting PLCs 101 (Part 1/2)
32mHey Attacker! I Can See You!
46mNakatomi Space: Lateral Movement as L1 Post-exploitation in OT
45mLet’s Play a Game – Challenges...
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking