Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Attacking ICS Plant #2

Discover and attack ICS plants using modbus protocol (Modicon / Schneider Electric).

Task 1: Discovery

The room Attacking ICS Plant #1 is a prerequisite. You should complete it and download scripts from there. The same scripts can be used to complete this room.

Before attacking the plant, identify the following registries:

  • open/close the feed pump (PLC_FEED_PUMP);

  • tank level sensor (PLC_TANK_LEVEL);

  • open/close the outlet valve (PLC_OUTLET_VALVE);

  • open/close the separator vessel valve (PLC_SEP_VALVE);

  • wasted oil counter (PLC_OIL_SPILL);

  • processed oil counter (PLC_OIL_PROCESSED);

  • open/close waste water valve (PLC_WASTE_VALVE).

VirtuaPlant can be downloaded from GitHub.

Answer the questions below

  1. No answer needed

Task 2: Flag #1

Let the oil overflow the tank for at least 60 seconds. Then connect and get the flag1: http://MACHINE_IP/flag1.txt.

Mind that the simulation should be reset before starting by pressing the ESC button. If the flag cannot be obtained, try to reset the room and start the attack again.

Answer the questions below

  1. Read flag1.txt

Task 3: Flag #2

Let the oil flow through the waste water valve only. Wait until the counter reaches 2000. Then connect and get the flag2: http://MACHINE_IP/flag2.txt.

Mind that the simulation should be reset before starting by pressing the ESC button. If the flag cannot be obtained, try to reset the room and start the attack again.

Answer the questions below

  1. Read flag2.txt
Room Icon

Attacking ICS Plant #2

Discover and attack ICS plants using modbus protocol (Modicon / Schneider Electric).

medium

75 min

4,875

User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

The room Attacking Plant #1 is a prerequisite. You should complete it and download scripts from there. The same scripts can be used to complete this room.

Before attacking the plant, identify the following registries:

  • open/close the feed pump (PLC_FEED_PUMP);

  • tank level sensor (PLC_TANK_LEVEL);

  • open/close the outlet valve (PLC_OUTLET_VALVE);

  • open/close the separator vessel valve (PLC_SEP_VALVE);

  • wasted oil counter (PLC_OIL_SPILL);

  • processed oil counter (PLC_OIL_PROCESSED);

  • open/close waste water valve (PLC_WASTE_VALVE).

VirtuaPlant can be downloaded from GitHub.

Answer the questions below
No answer needed

Let the oil overflow the tank for at least 60 seconds. Then connect and get the flag1: ://MACHINE_IP/flag1.txt.

Mind that the simulation should be reset before starting by pressing the ESC button. If the flag cannot be obtained, try to reset the room and start the attack again.

Answer the questions below
Read flag1.txt

Let the oil flow through the waste water valve only. Wait until the counter reaches 2000. Then connect and get the flag2: ://MACHINE_IP/flag2.txt.

Mind that the simulation should be reset before starting by pressing the ESC button. If the flag cannot be obtained, try to reset the room and start the attack again.

Answer the questions below
Read flag2.txt