Industrial Exploitation Framework (ISF)
#Security Testing#Offensive Security
Weaponizing Kerberos protocol flaws for stealthy attacks on domain users.
ISF (Industrial Exploitation Framework) Overview
ISF (Industrial Exploitation Framework) is a framework for exploitation that is built on Python. It functions similarly to the Metasploit framework.
Overview of ISF and Its Components
ISF is derived from the open-source project routersploit. Please note: Using ISF to attack targets without prior mutual consent is illegal. Users are required to adhere to all relevant laws. The developers are not responsible for any misuse or damage resulting from the use of this program.
ICS Protocol Clients:
- Modbus-TCP Client: This is the Modbus-TCP Client.
- WdbRPC Version 2 Client (VxWorks 6.x): This client is specifically for WdbRPC Version 2 on VxWorks 6.x.
- S7comm Client (S7 300/400 PLC): This is the S7comm Client designed for S7 300/400 PLCs.
Exploit Modules:
- S7-300/400 PLC Control: This module allows for start/stop control of S7-300/400 PLCs.
- S7-1200 PLC Control: This module provides start/stop/reset control for S7-1200 PLCs.
- VxWorks RPC DoS: This module enables a remote denial-of-service attack on VxWorks RPC (CVE-2015-7599).
- Quantum 140 PLC Control: This module controls the Quantum 140 PLC.
