Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-22 20:53:37 +00:00
Code Issues Projects Releases Packages Wiki Activity
hacktricks/network-services-pentesting/47808-udp-bacnet.md
Translator workflow e90c803209 Translated to Japanese
2023-07-07 23:42:27 +00:00

6.8 KiB
Raw Blame History

☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥

プロトコル情報

BACnetは、ASHRAE、ANSI、およびISO 16484-5標準[1]プロトコルを利用するビルオートメーションおよび制御（BAC）ネットワークのための通信プロトコルです。

BACnetは、暖房、換気、空調制御（HVAC）、照明制御、アクセス制御、火災検知システムおよびそれらに関連する機器など、建物オートメーションおよび制御システムの通信を可能にするよう設計されています。 BACnetプロトコルは、特定の建物サービスに関係なく、コンピュータ化された建物オートメーションデバイスが情報を交換するためのメカニズムを提供します。 Wikipediaより

デフォルトポート： 47808

PORT      STATE SERVICE
47808/udp open  BACNet -- Building Automation and Control NetworksEnumerate

列挙

手動

pip3 install BAC0
import BAC0
bbmdIP = '<IP>:47808'
bbmdTTL = 900
bacnet = BAC0.connect(bbmdAddress=bbmdIP, bbmdTTL=bbmdTTL) #Connect
bacnet.vendorName.strValue
#I couldn't find how to obtain the same data as nmap with this library or any other
#talk me if you know how please

自動

UDP BACnet scanning can be automated using various tools and scripts. These tools and scripts can help in identifying BACnet devices on a network and gathering information about them.

One popular tool for automating UDP BACnet scanning is the BACnet Discovery Tool (BDT). This tool allows users to scan a network for BACnet devices and retrieve information such as device type, device instance, and supported services. BDT can also perform additional tasks such as device enumeration and property value retrieval.

Another tool that can be used for automating UDP BACnet scanning is the BACnet/IP Scanner. This tool allows users to scan a network for BACnet devices and retrieve information such as device ID, device name, and supported services. The BACnet/IP Scanner can also perform tasks such as device enumeration and property value retrieval.

In addition to these tools, there are also various scripts available that can automate UDP BACnet scanning. These scripts can be written in programming languages such as Python or Ruby and can be customized to suit specific scanning requirements.

Automating UDP BACnet scanning can save time and effort, as it eliminates the need for manual scanning and allows for faster identification of BACnet devices on a network. However, it is important to use these tools and scripts responsibly and ethically, ensuring that proper authorization is obtained before scanning any network.

nmap --script bacnet-info --script-args full=yes -sU -n -sV -p 47808 <IP>

このスクリプトは、BACnetネットワークに外部デバイスとして参加しようとはせず、単にIPアドレス指定可能なデバイスに直接BACnetリクエストを送信します。

Shodan

  • port:47808 instance
  • "Instance ID" "Vendor Name"
☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥