4 ms·
You don't need a "custom exploit" or a "custom developed tool" to access a public file called config.bog and base64 decode the user:pass. This Tridium exploit
by watty 13y ago
You don't need a "custom exploit" or a "custom developed tool" to access a public file called config.bog and base64 decode the user:pass. This Tridium exploit was well publicized in the past year but too many people (including this contractor who installed it) failed to upgrade the security or install the patches.
- tiredofcareer 13y agoRunning on Windows on the developer's workstation, no less... Let me quickly clarify that I'm not anti-Windows, it was just a double-take to see it used as a workstation for security research like this (though I'm using the word 'research' lightly). Strange article all around, lots of it caught my eye.
- kybernetyk 13y agoMaybe they have only windows licenses of IDA pro? There are a few very useful tools for windows - especially for reverse engineering and hardware/embedded stuff.
- cylanceinc 13y ago"Custom exploit" might be a bit of a misnomer, Billy and Terry (the same researchers that are credited on the initial ICS-CERT Advisory regarding the Niagara framework) were referencing a set of utilities/scripts they put together to automate testing. Original ICS-CERT Advisory: http://ics-cert.us-cert.gov/advisories/ICSA-12-228-01 http://ics-cert.us-cert.gov/advisories/ICSA-12-228-01 (Edit: Disclaimer, I work for Cylance.)