-
Notifications
You must be signed in to change notification settings - Fork 10
/
Copy pathindex2.html
422 lines (387 loc) · 22.2 KB
/
index2.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:og="http://ogp.me/ns#"
xmlns:fb="https://www.facebook.com/2008/fbml">
<head>
<title>工匠安全实验室 | 专注于工控安全</title>
<!-- Using the latest rendering mode for IE -->
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<!-- Open Graph tags -->
<meta property="og:type" content="website"/>
<meta property="og:title" content="工匠安全实验室 | 专注于工控安全"/>
<meta property="og:url" content="."/>
<meta property="og:description" content="工匠安全实验室 | 专注于工控安全"/>
<meta name="description" content="专注于工控网络安全、物联网安全、基础设施安全。" />
<meta name="keywords" content="工控安全,工匠安全实验室,工控网络安全,物联网安全,基础设施安全,工控安全导航,ics,scada,ics security,scada security" />
<!-- Bootstrap -->
<link rel="stylesheet" href="./theme/css/bootstrap.min.css" type="text/css"/>
<!-- <link href="http://cdn.bootcss.com/bootstrap/3.1.0/css/bootstrap.min.css" rel="stylesheet" type="text/css"/> -->
<link href="./theme/css/font-awesome.min.css" rel="stylesheet">
<link href="./theme/css/pygments/emacs.css" rel="stylesheet">
<link rel="stylesheet" href="./theme/css/style.css" type="text/css"/>
<link href="./feed.xml" type="application/rss+xml" rel="alternate"
title="工匠安全实验室 | 专注于工控安全 RSS Feed"/>
<link href="./theme/css/github-markdown.css" rel="stylesheet">
</head>
<body>
<div class="navbar navbar-default navbar-fixed-top myheader" role="navigation">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-ex1-collapse">
<span class="sr-only">Toggle navigation</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a href="./" class="navbar-brand">
<img src="./logo.png" width="40" height="40"/> </a>
<div class="brand" id="titlename">工匠安全实验室</div>
</div>
<div class="collapse navbar-collapse navbar-ex1-collapse navbar-right">
<ul class="nav navbar-nav">
<li><a href="http://icsmaster.com/index.html">首页</a></li>
<li><a href="http://icsmaster.com/category/news.html">最新资讯</a></li>
<li><a href="http://icsmaster.com/category/security.html">安全研究</a></li>
<li><a href="http://icsmaster.com/category/tool.html">开源工具</a></li>
<li><a href="http://icsmaster.com/nav.html">工控安全导航</a></li>
<li><a href="http://icsmaster.com/other/about.html">关于我们</a></li>
</ul>
<ul class="nav navbar-nav navbar-right">
<!--
<li class="banner">
<a title="网速较慢的话请耐心等待~" href='javascript:(function(){function c(){var e=document.createElement("link");e.setAttribute("type","text/css");e.setAttribute("rel","stylesheet");e.setAttribute("href",f);e.setAttribute("class",l);document.body.appendChild(e)}function h(){var e=document.getElementsByClassName(l);for(var t=0;t<e.length;t++){document.body.removeChild(e[t])}}function p(){var e=document.createElement("div");e.setAttribute("class",a);document.body.appendChild(e);setTimeout(function(){document.body.removeChild(e)},100)}function d(e){return{height:e.offsetHeight,width:e.offsetWidth}}function v(i){var s=d(i);return s.height>e&&s.height<n&&s.width>t&&s.width<r}function m(e){var t=e;var n=0;while(!!t){n+=t.offsetTop;t=t.offsetParent}return n}function g(){var e=document.documentElement;if(!!window.innerWidth){return window.innerHeight}else if(e&&!isNaN(e.clientHeight)){return e.clientHeight}return 0}function y(){if(window.pageYOffset){return window.pageYOffset}return Math.max(document.documentElement.scrollTop,document.body.scrollTop)}function E(e){var t=m(e);return t>=w&&t<=b+w}function S(){var e=document.createElement("audio");e.setAttribute("class",l);e.src=i;e.loop=false;e.addEventListener("canplay",function(){setTimeout(function(){x(k)},500);setTimeout(function(){N();p();for(var e=0;e<O.length;e++){T(O[e])}},15500)},true);e.addEventListener("ended",function(){N();h()},true);e.innerHTML=" <p>If you are reading this, it is because your browser does not support the audio element. We recommend that you get a new browser.</p> <p>";document.body.appendChild(e);e.play()}function x(e){e.className+=" "+s+" "+o}function T(e){e.className+=" "+s+" "+u[Math.floor(Math.random()*u.length)]}function N(){var e=document.getElementsByClassName(s);var t=new RegExp("\\b"+s+"\\b");for(var n=0;n<e.length;){e[n].className=e[n].className.replace(t,"")}}var e=30;var t=30;var n=350;var r=350;var i="//s3.amazonaws.com/moovweb-marketing/playground/harlem-shake.mp3";var s="mw-harlem_shake_me";var o="im_first";var u=["im_drunk","im_baked","im_trippin","im_blown"];var a="mw-strobe_light";var f="//s3.amazonaws.com/moovweb-marketing/playground/harlem-shake-style.css";var l="mw_added_css";var b=g();var w=y();var C=document.getElementsByTagName("*");var k=null;for(var L=0;L<C.length;L++){var A=C[L];if(v(A)){if(E(A)){k=A;break}}}if(A===null){console.warn("Could not find a node of the right size. Please try a different page.");return}c();S();var O=[];for(var L=0;L<C.length;L++){var A=C[L];if(v(A)){O.push(A)}}})()'>High一下!</a>
</li> -->
<li><a href="./archives.html"><i class="fa fa-th-list"></i><span class="icon-label">归档</span></a></li>
</ul>
</div>
<!-- /.navbar-collapse -->
</div>
</div> <!-- /.navbar -->
<div class="container">
<div class="row">
<div class="col-sm-9">
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./news/monthly_report_10_2.html">工控安全半月报第一期（2017-10）</a></h2>
</div>
<div class="panel-body">
<div class="summary"><blockquote>
<p>工匠安全实验室最新版块，专注工控安全的我们，精选近期全球范围内工控安全领域的重要事件，让您及时了解行业发展动态，洞悉行业尖端技术，探寻行业前进方向。</p>
</blockquote>
<h2>行业动态</h2>
<ul>
<li>
<p><a href="http://www.icscybersecurityconference.com/">2017 ICS Cyber Security Conference</a></p>
</li>
<li>
<p><a href="http://news.hust.edu.cn/2017/1024/c213a88293/page.htm">首届“武汉工控安全论坛”在校召开 ...</a></p></li></ul>
<a class="readmore" href="./news/monthly_report_10_2.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./tool/AB_VPLC.html">构建虚拟工控环境系列 - 罗克韦尔虚拟PLC</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、 概述</h2>
<p>本篇主要介绍罗克韦尔虚拟PLC的搭建，使用的操作系统为Windows7 x86 Ultimate（DEEP_GHOST_WIN7_SP1_X86_V2015_06.iso），虚拟化软件为 VVMware Workstation 12 Pro，（AB）SoftLogix5800 ...</p>
<a class="readmore" href="./tool/AB_VPLC.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./tool/WinAC_RTX.html">构建虚拟工控环境系列 - 西门子虚拟PLC</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、 概述</h2>
<p>跟随着工控安全一路走来，工控安全市场今年明显有相当大的改善，无论从政策还是客户需求，都在逐步扩大中。但是，搞工控安全研究的人员却寥寥无几。一方面工控安全是个跨学课的技术，需要了解多方面的知识，有比较高的技术上的门槛；另一方面，没有可以研究和学习的便利的环境。一般，搞这方面研究的公司或者个人 ...</p>
<a class="readmore" href="./tool/WinAC_RTX.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./security/plcinjecter.html">利用Modbus PLC作为攻击载荷分发系统</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、 介绍</h2>
<p>随着互联网+、工业4.0的推进，以前的网络边界被逐渐打破，工业控制系统的安全问题越来越突出，近期针对控制器的攻击层出不穷，如 <a href="http://icsmaster.com/news/logicblob.html">PLC逻辑炸弹</a>、<a href="http://icsmaster.com/security/ClearEnergy.html">PLC勒索软件</a>，<a href="http://icsmaster.com/security/plcblaster.html">PLC蠕虫</a>，相关的技术我们一直在跟踪分析。</p>
<p>本文主要介绍怎么利用Modbus PLC作为攻击载荷 ...</p>
<a class="readmore" href="./security/plcinjecter.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./tool/isf.html">工控漏洞利用框架 - ISF(Industrial Security Framework)</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、 框架介绍</h2>
<p>本框架主要使用Python语言开发，通过集成ShadowBroker释放的NSA工具Fuzzbunch攻击框架，开发一款适合工控漏洞利用的框架。由于Fuzzbunch攻击框架仅适用于Python2.6，很多核心的功能都封装成了DLL，通过函数进行调用，不便于后期的移植和使用。但是，Fuzzbunch的命令行使用的确很方便，而且够傻瓜，所以就有集成一个适合工控漏洞利用的框架想法。新框架对主要的接口使用Python重新实现 ...</p>
<a class="readmore" href="./tool/isf.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./security/wincc_env.html">基于WinCC多协议通信实验环境搭建</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、 概述</h2>
<p>目前，随着自动化水平的提高和全厂自动化控制集成的要求，以及基于工业4.0和智能制造的工厂升级和新建工厂的需求。原来单点控制已经不能满足当前的要求。未来方便集成而采用同一家生产商的产品也不太可能。所以现场设备往往有很多设备厂商提供，也造成了不同设备之间通讯、设备和监控平台之间不能直接通讯，单独实现某些设备直接通讯往往也容易增加成本和现场故障点。
当前，随着工业生产的不断发展，工业控制软件取得了长足的进步 ...</p>
<a class="readmore" href="./security/wincc_env.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./news/logicblob.html">工业控制系统中的梯形逻辑炸弹</a></h2>
</div>
<div class="panel-body">
<div class="summary"><p>梯形逻辑炸弹（LLB）是指用梯形图编写的恶意软件。这样的恶意软件将被攻击者注入到PLC上的现有控制逻辑中，改变控制动作或者等待特定的触发信号来激活恶意行为。攻击者可以用LLB篡改合法的传感器读数。我们通过Stuxnet（震网）病毒来具体说明LLB的概念，然后我们将展示几个基于真实PLC设备的设计的LLB。值得注意的是，LLB有一定的隐蔽性，也就是说操作员们难以通过人工检查的方式的检测到LLB。</p>
<a class="readmore" href="./news/logicblob.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<article>
<div class="article-list">
<div class="panel panel-default">
<div class="panel-title">
<h2>  <a href="./security/wannacry.html">Wannacry(永恒之蓝)勒索蠕虫跟踪分析</a></h2>
</div>
<div class="panel-body">
<div class="summary"><h2>一、事件跟踪</h2>
<p>北京时间2017年5月12日晚间，一款名为Wannacry 的蠕虫勒索软件袭击全球网络，经研究发现这是不法分子通过改造之前泄露的NSA黑客武器库中“永恒之蓝”攻击程序发起的网络攻击事件。“永恒之蓝”通过扫描开放445文件共享端口的Windows电脑甚至是相关移动终端，无需用户进行任何操作，只要开机联网，不法分子就能在电脑和服务器中植入勒索软件、远程控制木马、虚拟货币挖矿机等一系列恶意程序 ...</p>
<a class="readmore" href="./security/wannacry.html">READ MORE</a>
</div>
</div>
</div>
</div>
</article>
<ul class="pagination">
<li class="prev"><a href="./index.html">«</a>
</li>
<li class=""><a
href="./index.html">1</a></li>
<li class="active"><a
href="./index2.html">2</a></li>
<li class=""><a
href="./index3.html">3</a></li>
<li class="next"><a
href="./index3.html">»</a></li>
</ul>
</div>
<div class="col-sm-3" id="sidebar">
<div class="sidebar_main">
<div class="well well-sm" id="sidebar">
<aside>
<section>
<ul class="list-group list-group-flush">
<li class="list-group-item">
<div>
<h4><i class="fa fa-home fa-lg"></i><span class="icon-label">近期文章</span></h4>
</div>
<ul class="list-group" id="recentposts">
<li class="list-group-item">
<a href="./security/Triton_src_analysis.html">
<span class="glyphicon glyphicon-volume-down"></span> Triton核心源代码分析
</a>
</li>
<li class="list-group-item">
<a href="./security/s7_300_1212C_1215C TRCV_compare.html">
<span class="glyphicon glyphicon-volume-down"></span> S7-300/1200TRCV变长度接收
</a>
</li>
<li class="list-group-item">
<a href="./news/monthly_report_12_2.html">
<span class="glyphicon glyphicon-volume-down"></span> 工控安全半月报第五期（2017-12 下）
</a>
</li>
<li class="list-group-item">
<a href="./news/hk_conference.html">
<span class="glyphicon glyphicon-volume-down"></span> 工匠安全实验室受邀赴港参加DragonCon2017会议
</a>
</li>
<li class="list-group-item">
<a href="./news/monthly_report_12_1.html">
<span class="glyphicon glyphicon-volume-down"></span> 工控安全半月报第四期（2017-12 上）
</a>
</li>
<li class="list-group-item">
<a href="./news/monthly_report_11_2.html">
<span class="glyphicon glyphicon-volume-down"></span> 工控安全半月报第三期（2017-11 下）
</a>
</li>
<li class="list-group-item">
<a href="./news/monthly_report_11_1.html">
<span class="glyphicon glyphicon-volume-down"></span> 工控安全半月报第二期（2017-11 上）
</a>
</li>
<li class="list-group-item">
<a href="./security/virtual_platform.html">
<span class="glyphicon glyphicon-volume-down"></span> 工业系统虚拟化测试平台搭建
</a>
</li>
<li class="list-group-item">
<a href="./news/monthly_report_10_2.html">
<span class="glyphicon glyphicon-volume-down"></span> 工控安全半月报第一期（2017-10）
</a>
</li>
<li class="list-group-item">
<a href="./tool/AB_VPLC.html">
<span class="glyphicon glyphicon-volume-down"></span> 构建虚拟工控环境系列 - 罗克韦尔虚拟PLC
</a>
</li>
</ul>
</li>
</section>
</aside>
</div>
</div>
<div class="sidebar_main">
<div class="well well-sm" id="sidebar">
<aside>
<section>
<li class="list-group-item"><h4><i class="fa fa-tags fa-lg"></i><span class="icon-label">最新评论</span></h4></a>
<!-- UYAN NEW COMMENT BEGIN -->
<div id="uyan_newcmt_unit"></div>
<script type="text/javascript" src="http://v2.uyan.cc/code/uyan.js?uid=2128692"></script> <!-- 如果已经过加载此行JS，即可不用重复加载 -->
<!-- UYAN NEW COMMENT END -->
</li>
</section>
</aside>
</div>
</div>
<div class="sidebar_main">
<div class="well well-sm" id="sidebar">
<aside>
<section>
<li class="list-group-item"><h4><i class="fa fa-github fa-lg"></i><span class="icon-label">GitHub</span></h4>
<div id="gh_repos">
<p class="list-group-item">Status updating...</p>
</div>
</li>
</section>
</aside>
</div>
</div>
<div class="sidebar_main">
<div class="well well-sm" id="sidebar">
<aside>
<section>
<li class="list-group-item"><h4><i class="fa fa-external-link-square fa-lg"></i><span class="icon-label">友情链接</span></h4>
<ul class="list-group" id="links">
<li class="list-group-item">
<a href="http://dragoncon.hk/" target="_blank">
DRAGONCON
</a>
</li>
<li class="list-group-item">
<a href="http://www.waitalone.cn/" target="_blank">
独自等待
</a>
</li>
<li class="list-group-item">
<a href="http://plcscan.org/blog/" target="_blank">
灯塔实验室
</a>
</li>
</ul>
</li>
</section>
</aside>
</div>
</div>
</div>
</div>
</div>
<footer class="myfooter">
<div class="container">
<div class="row">
<div class="col-xs-10">© 2018 W3H
<a href="http://docs.getpelican.com/" target="_blank">Pelican</a>,
<a href="http://getbootstrap.com" target="_blank">Bootstrap</a> </div>
<div class="col-xs-2"><p class="pull-right"><i class="fa fa-arrow-up"></i> <a href="#" id="pull-right-link">Back to top</a></p></div>
</div>
</div>
</footer>
<script type="text/javascript">
if(document.body.scrollWidth < 700){
document.getElementById('pull-right-link').style.display = 'none';
}
</script>
<script src="http://code.jquery.com/jquery.js"></script>
<!-- <script src="http://cdn.bootcss.com/bootstrap/3.1.0/js/bootstrap.min.js"></script> -->
<script src="./theme/js/bootstrap.min.js"></script>
<!-- Enable responsive features in IE8 with Respond.js (https://github.com/scottjehl/Respond) -->
<script src="./theme/js/respond.min.js"></script>
<!-- For the Tags Cloud -->
<script type="text/javascript">
if(document.body.scrollWidth < 1024){
document.getElementById("titlename").innerHTML="工匠安全实验室";
}
</script>
<!-- GitHub JS -->
<script type="text/javascript">
$(document).ready(function () {
if (!window.jXHR) {
var jxhr = document.createElement('script');
jxhr.type = 'text/javascript';
jxhr.src = './theme/js/jXHR.js';
var s = document.getElementsByTagName('script')[0];
s.parentNode.insertBefore(jxhr, s);
}
github.showRepos({
user: 'w3h',
count: 5,
skip_forks: false,
target: '#gh_repos'
});
});
</script>
<script src="./theme/js/github.js" type="text/javascript"></script>
<!-- End GitHub JS Code -->
<script>
var _hmt = _hmt || [];
(function() {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?8dd91be64f13d3df23dfc64664c3101b";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script>
</body>
</html>