The Certified ICS Penetration Testing Foundation course provides a strong foundation in penetration testing and security assessment for Industrial Control Systems (ICS) and Operational Technology (OT) environments. You will learn about ICS architecture, SCADA systems, PLCs, industrial networks, attack surfaces, common vulnerabilities, and fundamental penetration-testing methodologies.
The course focuses on understanding the unique security requirements of industrial environments and performing controlled and authorized security assessments.
IoT security skills are in high demand as connected devices grow across industries.
Gain in-depth knowledge and hands-on experience in IoT hacking and security.
Enhance your career prospects by adding IoT security expertise to your skill set.
Learn from industry experts with real-world experience in IoT security and research.
COURSE OVERVIEW
A practical and hands-on curriculum designed to take you from the basics
to advanced CIPTF concepts and real-world investigation skills.
Gain hands-on experience with industry-
relevant tools and techniques to become
confident in real-world CIPTF investigations
Industrial Control Systems (ICS) are used in various industries to monitor and control physical processes such as manufacturing, energy production, and transportation. They integrate hardware, software, and networked communication to automate industrial operations efficiently.
Standards that provide guidelines and best practices for securing Industrial Automation and Control Systems (IACS). They outline security requirements, control objectives, and implementation guidance tailored for ICS environments.
NIST Special Publication that provides guidance on securing Industrial Control Systems (ICS), including recommendations for cybersecurity controls, risk management, and incident response.
S7 Communication is used in Siemens PLCs for programming, data exchange, and control functions. It supports various communication protocols like MPI, PROFIBUS, and PROFINET.
Techniques to identify Siemens S7 devices on networks and gather information about their configurations and vulnerabilities.
Intercepting S7 communication to capture PLC program logic, data exchange, or control commands.
Unauthorized access to upload or download PLC programs to manipulate control logic or introduce malicious code.
Unauthorized control over the operational state of PLC CPUs, affecting the entire industrial process.
MQTT (Message Queuing Telemetry Transport) is a lightweight messaging protocol for IoT and industrial applications, facilitating efficient communication between devices and servers.
Overview of MQTT communication flows, message formats, and quality of service levels (QoS).
Identifying MQTT topics used for data exchange between devices and servers to understand communication patterns.
Analyzing MQTT message payloads and protocols to extract meaningful data or manipulate communication flows.
Conducting Denial-of-Service attacks against MQTT brokers or devices to disrupt communication and cause service unavailability.
Overview of ARM processor architecture commonly used in embedded systems and IoT devices.
Understanding ARM instruction set architecture (ISA) and assembly language for analyzing firmware and executing shellcode.
Conventions for calling and returning from functions in ARM assembly, critical for analyzing firmware and reverse engineering.
Interfacing with operating systems and peripherals using ARM system call conventions in firmware analysis.
Methods and tools for reverse engineering ARM-based firmware, including disassembly, debugging, and code analysis.
Exploiting buffer overflow vulnerabilities in ARM-based systems to gain unauthorized access, execute arbitrary code, or manipulate device behavior.
Encompasses a broader range of control systems used in industrial environments, including Distributed Control Systems (DCS), SCADA systems, and PLC-based systems. ICS manages processes across multiple industries.
Specifically refers to control systems used in large-scale industrial processes where multiple autonomous controllers are distributed throughout the system. DCS often includes centralized supervisory control for process monitoring and management.
Modbus is a communication protocol widely used in industrial automation for connecting electronic devices. It is simple and widely adopted for its ease of implementation.
Techniques to gather information about Modbus devices and networks, including scanning for active Modbus hosts and analyzing network traffic passively.
Intercepting and analyzing Modbus communication to capture sensitive information such as register values and commands.
Mimicking normal Modbus traffic to evade detection or conduct reconnaissance without triggering alarms.
Overloading Modbus devices or networks with excessive requests to disrupt operations or cause denial-of-service conditions.
Unauthorized manipulation of Modbus coil and register values to control PLC operations or cause process malfunctions.
Zigbee is a wireless communication protocol used in IoT and industrial automation for low-power, short-range wireless networking.
Identifying Zigbee devices, network topologies, and communication patterns to understand potential attack vectors.
Capturing and analyzing Zigbee communication to intercept sensitive data or commands transmitted between devices.
Resending captured Zigbee frames to execute unauthorized actions or manipulate device behavior.
Crafting and injecting malicious Zigbee packets to exploit vulnerabilities or compromise devices.
Emitting interference signals to disrupt Zigbee communication and cause denial-of-service conditions.
Forcing Zigbee devices to disconnect from their network, disrupting communication and potentially causing operational disruptions.
Recognizing and decompressing firmware images to access and analyze embedded software and configurations.
Reverse engineering firmware to understand functionality, vulnerabilities, and communication protocols used by embedded devices.
Emulating firmware environments to replicate device behavior, test vulnerabilities, and validate security controls.
Understand ICS architecture, OT environments, SCADA systems, PLCs, industrial protocols, and industrial network security.
Learn structured approaches for reconnaissance, attack-surface identification, vulnerability assessment, and security testing in authorized ICS environments.
Develop skills in vulnerability identification, network analysis, security assessment, risk evaluation, and controlled penetration testing.
Build a strong foundation for careers in ICS penetration testing, OT security, industrial cybersecurity, SCADA security, vulnerability assessment, and security consulting.
Whether you're just beginning or advancing your expertise, UnoAcademy provides the practical cybersecurity training, hands-on experience and expert guidance you need to succeed.
Address:
601, park plaza business center, S No. 296/2, Porwal Rd, Lohegaon, Pune, Maharashtra 411047
Phone: 91 8454095561
Email: [email protected]
©Copyright 2024 Unoacademy Labs LLP
