Showing posts with label #SCADA. Show all posts
Showing posts with label #SCADA. Show all posts

Sunday, January 22, 2012

#fulldisclosure #US United States of America Wide open #SCADA systems



                         _..._             _____                         _____     
                      .-'_..._''.         /    /     _______            /    /     
                    .' .'      '.\       /    /      \  ___ `'.        /    /      
       /|  /|      / .'                 /    /        ' |--.\  \      /    /       
   ___//__//__    . '                  /    /         | |    \  '    /    /        
  '--//--//---'   | |                 /    /  __      | |     |  '  /    /  __     
 ___//__//__   _  | |                /    /  |  |     | |     |  | /    /  |  |    
'--//--//---'.' | . '               /    '   |  |     | |     ' .'/    '   |  |    
  |/  |/    .   | /\ '.          . /    '----|  |---. | |___.' /'/    '----|  |---.
          .'.'| |// '. `._____.-'//          |  |   |/_______.'//          |  |   |
        .'.'.-'  /    `-.______ / '----------|  |---'\_______|/ '----------|  |---'
        .'   \_.'              `             |  |                          |  |    
                                            /____\                        /____\   

@ntisec Exposes Amerikan #SCADA systems #fulldisclosure

The world has been warned enough, and corperate power has done nothing. People are at risk. We all need to be made aware of
our infrastructure lacking normal forms of safety procedures.

Hackers are targetting #SCADA this year and we have to do something about it.!

So here we go.

Please take some Screenshots and show them to me on @twitter @ntisec.
Be carefull and dont cause rampant anarchy. They might trace you and I have warned you not to alter control states. Just have a look around
To see 4 yourself how these systems affect our everyday life.

Maybe its time politics pointed their attention to bigger problems then #SOPA #PIPA etc.
Trying to regulate the last freedom, will cause uprising and dangerous cyber threats.
As our financial state gets worse and the smart IT and SEC workers have nothing to da
they will at least cause mayhem against what in our view is injustice.
Arresting and kidnapping foreign people for spreading bandwith? #OPMEGAUPLOAD?
Go try and fix your infrastructure first. Its wide open to legally expose and enter your
buildings. Like urban exploring from behind my PC.

Locking up Bradley manning? Better be carefull a hacker does not open his jaildoors 4fun!

Dont even need an exploit to get in here. Dont even have to be a hacker. No passwords what so ever.

So how is the state of your other #SCADA systems like your electrical grid? Or trafic management?
What about chemical industry? Or can hackers swich some stuf that sends trains to another fail?

That pump you saw a while back is just the first sign af being infiltrated.

It can be your vent system, a cooky factory up to a switch that switches of an entire country and economy.

These systems where found through google and shodanHQ by using the search term:


 :|slot:/

Finding them and linking them is completely legal.

Be carefull not to touch anything.

http://12.167.187.176/ord?file:^Web/html/Main.html Hmmm..... Global Forex Trade building -> not so smart leaving yourControls in the hands of #anonymous

http://209.254.21.226/file/px/Demo%20Home.px
http://75.145.221.181/ord?station:|slot:/fxApp
http://158.123.163.236/ord?station:|slot:/Graphics/HX_1
http://70.148.24.7/ord?file:^px/MainHomePage.px
http://64.49.112.47/ord?station:|slot:/fxApp
http://209.56.73.31/ord?station:|slot:/
http://204.14.161.214/ord?station:|slot:/Drivers/LonNetwork/Home
http://99.5.127.36/ord?file:^px/FPlan1.px
http://99.191.85.49/ord?station:|slot:/fxApp
http://204.215.37.73/file/px/Home.px
http://66.162.112.212/ord?station:|slot:/
http://63.227.59.186/file/PX/Splash/Splash.px
http://65.79.122.12/file/WEB/main.html
http://207.255.176.229/ord?station:|slot:/
http://207.91.52.176/ord?file:^px/Home.px
http://96.27.226.119/ord?station:|slot:/
http://155.101.230.171/ord?station:|slot:/fxApp
http://66.134.232.218/ord?station:|slot:/
http://216.212.30.61/file/Px/Main.px
http://64.128.134.126/ord?file:^WEB/main.html
http://64.128.134.126/ord?file:^WEB/main.html
http://173.160.118.253/file/px/OpenArmsHome.px
http://207.54.163.236/ord?station:|slot:/Drivers/NiagaraNetwork/Tremco_North_HQ/points/Penthouse/AHU_1
http://209.142.166.186/ord?file:^web/SiteTreeIE.html
http://64.107.163.67/ord?file:^px/MAIN.px
http://216.48.250.36/ord?station:|slot:/fxApp
http://74.228.253.3/ord?file:^px/Home.px
http://63.162.239.54/file/px/wb/Main.px
http://74.3.82.116/ord?station:|slot:/Home
http://63.139.252.4/ord?file:^Graphics/HomePage.px
http://168.180.221.21/ord?file:^px/home.px
http://137.148.114.16/ord?station:|slot:/
http://68.143.24.242/ord?file:^PX/Main.px
http://71.242.245.229/ord?station:|slot:/
http://152.15.171.111/file/UNCCWebsite/BASHome.html
http://64.183.9.30/ord?file:^px/Home.px
http://24.248.13.71/ord?file:^web/SiteTreeIE.html
http://12.171.121.27/ord?station:|slot:/Navigation/Main

http://170.185.95.21/
http://166.143.167.44/ord?file:^px/Home.px
http://167.206.190.194/file/Px/Home.px
http://192.154.63.85/ord?station:|slot:/Drivers/Graphics/DemandComparison
http://152.33.35.68/ord?station:|slot:/
http://70.155.158.246/ord?station:|slot:/floor_plan_hx
http://108.71.20.49/ord?file:^frames/home.html
http://12.167.187.176/ord?file:^Web/html/Main.html
http://206.227.27.244/ord?station:|slot:/fxApp
http://69.147.183.35/ord?station:|slot:/



/>     ______      __    __    __      __                              
   _/      \_   |  \  |  \  |  \    |  \                             
  /   $$$$$$ \  | $$\ | $$ _| $$_    \$$  _______   ______    _______
 /  $$$____$$$\ | $$$\| $$|   $$ \  |  \ /       \ /      \  /       \
|  $$/     \ $$\| $$$$\ $$ \$$$$$$  | $$|  $$$$$$$|  $$$$$$\|  $$$$$$$
| $$|  $$$$$| $$| $$\$$ $$  | $$ __ | $$ \$$    \ | $$    $$| $$     
| $$| $$| $$| $$| $$ \$$$$  | $$|  \| $$ _\$$$$$$\| $$$$$$$$| $$_____
| $$ \$$  $$| $$| $$  \$$$   \$$  $$| $$|       $$ \$$     \ \$$     \
 \$$\ \$$$$$$$$  \$$   \$$    \$$$$  \$$ \$$$$$$$   \$$$$$$$  \$$$$$$$
  \$$\ __/   \                                                       
   \$$$    $$$       Released Fulldisclosure by https://twitter.com/#!/ntisec
     \$$$$$$                            @ntisec

Thursday, January 19, 2012

#SCADA IDIOTS #FULLDISCLOSURE By @ntisec


#FULLDISCLOSURE By @ntisec #SCADA
Search with www.shodanHQ.com and GOOGLE using        :|slot:/        as my search word resulted in finding that dutch open #SCADA sytem.
http://webwereld.nl/nieuws/109228/sporthal-gehackt-via-wijd-open-scada-systeem.html
Below you wil find some more vulnerable systems.
Since its too many, I am gooing full disclosure.
Hoping people will notify owners of the flawed systems.
Be careful, these control infrastructure and might be very dangerous controls
Also tried cooperating with the DUTCH @NCSC_NL But they are not open enough, and wont tell me what they did with my info and who got the credits.
Also in situations like this keeping threats a secret does not help. Awarenes needs to be poited out in the open. Ifeel threatened and pointed at
as if I am an terrorist eventhough I am trying to sound the alarmbells.
Most scada systems dont have the need to be webfaced.
So lets get thta airgap back in place.
I gave @BRENNO journalist 1 of the #threats in this list situated in the NETHERlands
The rest of this list has not been investigated. Because I am scared that will make me a terrorist.
Behave, and have fun.

                         _..._             _____                         _____      


                      .-'_..._''.         /    /     _______            /    /      
                    .' .'      '.\       /    /      \  ___ `'.        /    /      
       /|  /|      / .'                 /    /        ' |--.\  \      /    /        
   ___//__//__    . '                  /    /         | |    \  '    /    /        
  '--//--//---'   | |                 /    /  __      | |     |  '  /    /  __      
 ___//__//__   _  | |                /    /  |  |     | |     |  | /    /  |  |    
'--//--//---'.' | . '               /    '   |  |     | |     ' .'/    '   |  |    
  |/  |/    .   | /\ '.          . /    '----|  |---. | |___.' /'/    '----|  |---.
          .'.'| |// '. `._____.-'//          |  |   |/_______.'//          |  |   |
        .'.'.-'  /    `-.______ / '----------|  |---'\_______|/ '----------|  |---'
        .'   \_.'              `             |  |                          |  |    
                                            /____\                        /____\
204.14.161.214
Added on 15.01.2012
United States Clovis
Details
HTTP/1.0 302 Moved Temporarily
location: http://204.14.161.214/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
165.154.50.20
Added on 12.01.2012
Canada Barrie
Details
web.gildasclubbarrie.org
HTTP/1.0 302 Moved Temporarily
location: http://165.154.50.20/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.167.25.88
Added on 06.01.2012
United States Oklahoma City
Details
wsip-70-167-25-88.ok.ok.cox.net
HTTP/1.0 302 Moved Temporarily
location: http://70.167.25.88/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
93.108.133.5
Added on 01.01.2012
Portugal Algés
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://93.108.133.5/ord?station:|slot:/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.34
216.48.255.202
Added on 31.12.2011
United States Lubbock
Details
HTTP/1.0 302 Moved Temporarily
location: http://216.48.255.202/ord?station:|slot:/Drivers/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
173.181.202.83
Added on 28.12.2011
Canada Burnaby
Details
HTTP/1.0 302 Moved Temporarily
location: http://173.181.202.83/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 116
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
209.191.41.18
Added on 27.12.2011
United States Lodi
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://209.191.41.18/ord?station:|slot:/Home$20Page/College
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
74.3.82.116
Added on 10.12.2011
United States Brooklyn
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://74.3.82.116/ord?station:|slot:/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.25.3
12.171.121.34
Windows 2000
Added on 05.12.2011
United States Richmond
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://12.171.121.34/ord?station:|slot:/Drivers/DemoNetwork/Graphics/Home
content-length: 120
server: Niagara Web Server/3.6.31
64.132.95.120
Added on 26.07.2011
United States Dayton
Details
64-132-95-120.heapy.com
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://64.132.95.120/ord?station:|slot:/Graphics/Home
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
198.108.97.6
NetCache 5.3.1
Added on 05.07.2011
United States Ann Arbor
Details
HTTP/1.0 302 Moved Temporarily
location: http://198.108.97.6/ord?station:|slot:/Drivers/ComfortPointNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
69.58.47.21
Added on 12.04.2011
United States Sturgis
Details
69-58-47-21.kresanet.org
HTTP/1.0 302 Moved Temporarily
location: http://69.58.47.21/ord?station:|slot:/Drivers/LonNetwork/Home_Page
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
84.246.48.11
Added on 06.04.2011
Netherlands Kaatsheuvel
Details
084-246-048-011.PN.NL
HTTP/1.0 302 Moved Temporarily
location: http://84.246.48.11/ord?station:|slot:/Graphics/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
138.188.28.248
Added on 05.03.2011
Switzerland Berne
Details
HTTP/1.0 302 Moved Temporarily
location: http://138.188.28.248/ord?station:|slot:/|view:Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
124.178.246.152
Added on 04.03.2011
Australia Adelaide
Details
CPE-124-178-246-152.static.sa.bigpond.net.au
HTTP/1.0 302 Moved Temporarily
location: http://124.178.246.152/ord?station:|slot:/Home$20Page
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
216.49.115.9
Added on 21.02.2011
United States Saint Meinrad
Details
dbba263-psci.psci.net
HTTP/1.0 302 Moved Temporarily
location: http://216.49.115.9/ord?station:|slot:/HomeGraphic
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
165.138.51.31
Added on 10.02.2011
United States Frankton
Details
HTTP/1.0 302 Moved Temporarily
location: http://165.138.51.31/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
89.181.124.47
Added on 06.02.2011
Portugal Odivelas
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://89.181.124.47/ord?station:|slot:/Home
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
206.47.97.8
Added on 24.01.2011
Canada Collingwood
Details
HTTP/1.0 302 Moved Temporarily
location: http://206.47.97.8/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
208.80.99.243
Added on 20.01.2011
Canada Barrie
Details
HTTP/1.0 302 Moved Temporarily
location: http://208.80.99.243/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
206.47.196.26
Added on 20.01.2011
Canada New Liskeard
Details
NT206HS47-196-26.nt.net
HTTP/1.0 302 Moved Temporarily
location: http://206.47.196.26/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
99.192.183.81
Added on 18.01.2011
United States Farmington
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://99.192.183.81/ord?station:|slot:/PxHome
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.25.3
69.62.63.75
Added on 12.01.2011
United States Panhandle
Details
HTTP/1.0 302 Moved Temporarily
location: http://69.62.63.75/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
81.146.65.215
Added on 10.01.2011
United Kingdom Ipswich
Details
host81-146-65-215.btremoteinternet-dsl.bt.net
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://81.146.65.215/ord?station:|slot:/Graphics/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.34
207.74.210.25
Foundry,SonicWall BigIron,TZ
Added on 08.01.2011
United States Harper Woods
Details
HTTP/1.0 302 Moved Temporarily
location: http://207.74.210.25/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
203.122.220.132
Added on 18.12.2010
Australia Adelaide
Details
ppp203-122-220-132.static.internode.on.net
HTTP/1.0 302 Moved Temporarily
location: http://203.122.220.132/ord?station:|slot:/HomePage
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
123.100.130.110
Added on 17.12.2010
Australia Eagle Farm
Details
cpe-123-100-130-110.pivit.net.au
HTTP/1.0 302 Moved Temporarily
location: http://123.100.130.110/ord?station:|slot:/Home$20Page
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.88.221.13
Foundry,SonicWall BigIron,TZ
Added on 23.11.2010
United States South Easton
Details
70-88-221-13-first-assembly-of-God-auburn-ne-ma.hfc.comcastbusiness.net
HTTP/1.0 302 Moved Temporarily
location: http://70.88.221.13/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
219.90.201.244
Added on 25.10.2010
Australia Adelaide
Details
219-90-201-244.static.adam.com.au
HTTP/1.0 302 Moved Temporarily
location: http://219.90.201.244/ord?station:|slot:/Drivers/HOME$20PAGE
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.28.16.14
Added on 09.02.2010
Canada Newmarket
Details
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://70.28.16.14/ord?station:|slot:/HOME
Server: Niagara Web Server/1.1
207.135.163.6
NetBSD 1.6
Added on 23.01.2010
United States Chicago
Details
HTTP/1.0 302 Moved Temporarily
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://207.135.163.6/ord?station:|slot:/Home
Server: Niagara Web Server/1.1
216.49.115.10
Added on 30.11.2009
United States Saint Meinrad
Details
dbba264-psci.psci.net
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://216.49.115.10/ord?station:|slot:/HomeGraphic
Server: Niagara Web Server/1.1
204.77.52.67
Added on 29.11.2009
United States Saint Paul
Details
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://204.77.52.67/ord?station:|slot:/pxHome
Server: Niagara Web Server/1.1
http://165.154.50.20/ord?station:|slot:/HOME
http://70.91.37.250/ord?station:|slot:/Services
http://216.172.46.42/ord?station:|slot:/
http://64.49.112.47/ord?station:|slot:/fxApp
http://69.119.154.100/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
http://77.40.144.214/ord?station:|slot:/
http://209.56.73.31/ord?station:|slot:/
http://97.93.208.165/ord?station:|slot:/Services
http://206.127.124.76/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
http://204.14.161.214/ord?station:|slot:/Drivers/LonNetwork/Home
http://158.123.163.236/ord?station:|slot:/Graphics/HX_1
http://68.90.164.14/ord?station:|slot:/Services
http://209.33.201.6/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
70.167.25.88/ord?station:|slot:/Home
http://216.69.8.218/ord?station:|slot:/
http://66.162.112.212/ord?station:|slot:/
http://207.255.193.77/ord?station:|slot:/Services
http://209.137.240.141/ord?station:|slot:/Services
http://209.33.248.81/ord?station:|slot:/Services
http://206.216.159.139/ord?station:|slot:/
http://207.67.73.74/ord?station:|slot:/Services
http://207.67.73.74/ord?station:|slot:/
http://209.254.21.226:8280/ord?station:|slot:/Drivers/ModbusAsyncNetwork/ModiconPLC/points/AHU1
http://209.254.21.226:8280/ord?station:|slot:
http://aecabin.tzo.com/ord?station:|slot:/Drivers
http://65.126.88.227/ord?station:|slot:/Drivers/LonNetwork
http://aecabin.tzo.com/ord?station:|slot:/Drivers/LonNetwork
http://65.126.88.227/ord?station:|slot:
http://165.228.159.136/ord?station:|slot:/Site
http://207.210.134.93/ord?station:|slot:/
http://84.249.121.239/ord?station:|slot:/P$e4$e4valikko finland