IoT Analysis and Hacking

Gather information using online tools

OffSec’s Exploit Database Archivewww.exploit-db.com

use SCADA as a search query

"login" intitle:"scada login"

https://www.shodan.io/www.shodan.io

Port 1833 is default MQTT port

port:1833

Search for Modbus-enabled ICS/SCADA systems:
port:502

Search for SCADA systems using PLC name:
“Schneider Electric”

Search for SCADA systems using geolocation:
SCADA Country:"US"

mqtt -> wireshark filter