hacktricks/network-services-pentesting/pentesting-modbus.md
2023-06-06 18:56:34 +00:00

3.2 KiB

Informação Básica

O Protocolo Modbus é uma estrutura de mensagens desenvolvida pela Modicon em 1979. É usado para estabelecer comunicação mestre-escravo/cliente-servidor entre dispositivos inteligentes.

Porta padrão: 502

PORT    STATE SERVICE
502/tcp open  modbus

Enumeração

Modbus TCP

Nmap

nmap -sV --script modbus-discover <target>

Modscan

Modscan is a tool that can be used to perform Modbus enumeration and exploitation.

modscan32.exe <target>

mbtget

mbtget is a tool that can be used to read and write Modbus registers.

mbtget -a <target>

Metasploit

Metasploit has a module that can be used to perform Modbus enumeration and exploitation.

use auxiliary/scanner/scada/modbusclient

Other tools

Other tools that can be used for Modbus enumeration and exploitation include:

Modbus RTU

mbtget

mbtget can also be used to read and write Modbus RTU registers.

mbtget -s /dev/ttyS0 -a <target>

Other tools

Other tools that can be used for Modbus RTU enumeration and exploitation include:

nmap --script modbus-discover -p 502 <IP>
msf> use auxiliary/scanner/scada/modbusdetect
msf> use auxiliary/scanner/scada/modbus_findunitid
☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥