SCADA Hacking: Metasploit SCADA Modules

Here, I have tried to compile a list of most of the Metasploit modules that are useful for testing/hacking SCADA/ICS. Please keep in mind that SCADA/ICS sites use varied hardware and protocols, so reconnaissance becomes critical for a successful hack. You will need to know, at a minimum, the manufacturer and the protocol and then find the appropriate module from this list.

The List Format

This information is organized in the following format;

Tool/Exploit MSF-Update Developer/Vendor System(s) Metasploit Reference

I believe that most of these columns are self-explanatory with the possible exceptions of MSF-Update and System(s).

The MSF-Update column indicates whether the module is available when you do a an update on Metasploit. Some modules will automatically update and be added to your Metasploit Framework. Others, you will likely need to add manually.

The System(s) column indicates the systems vulnerable to the exploit/scanner module. Once again, I want to emphasize the varied nature of SCADA/ICS systems.

Please note that the modules are varied from exploits and auxiliary modules (primarily used for recon).