1 reply to this topic

[SamoletMaj]

Hello there Gents...

I am new to the business and i am looking to gain some knowledge specifically about exploiting PLC's and industrial control networks, i am a PLC programmer in the control systems industry and i have been tasked with identifying/exploiting vulnerabilities in our control systems.

I have already discovered several problems mainly dealing with UDP communication protocols.
I want to dig deeper and focus on two things, Buffer overflows on PLC's and exploits regarding crafting EIP/CIP messages. (Ethernet/IP)

What books/reading in general would you recommend?

Any suggestions are welcome. I have been browsing amazon but i would rather get an honest recommendation from someone who has read the book already.

Thanks!

[Glyph]

Highly recommend 'Metasploit: The Penetration Testers Guide'.
Also you might want to get familiar with Metaploit. Three versions exist: Framework, Community, Pro.
Framework is completely free, Community requires licensing, and Pro is a pay version.
These will get you started on your path.