Water Power Plant SCADA System Exploit - Hex00010 - Finder

Re - Linking all of my old ' guest ' pastebins to one main account so i dont have to search for all of them through google


Main PasteBin Link -> http://pastebin.com/UPCjHYij
-------------------------------------------------------------------------------------------------------

/**
 *  ClearScada Exploit   -  Finder - 2012 - DO NOT SHARE
 *  International SCADA Exploit Finder
 *  Status: Public
 *
 *  Programmed by: Hex00010
 *
 */

Hello everyone

Today i present you with the  SCADA Exploit that  can find  Servers   using the  ClearSCADA   product.

this is a demonstration proof of concept exploit - this exploit  is  more  informational - Unauthentication
it uses a  client/server.

this exploit is in response to the  SCADA EXPLOITS - Hex00010 - Water - Power Plant  located here

http://pastebin.com/SjHSWfkV



Server -> reads  5,000 ip's at a  time - once those  5k are up it loads a  new set  of  5k ( also can run multiple ip's if configured through the server correctly for Parallel Data Processing

opcode 0 - request a server
opcode 1 - the servers result (0 for invalid, 1 for valid)

Opens Port on : 8081

Each server  has its own pre-defined  ip list



Server Machine 1:  host  100mb of  ip's
Server Machine 2:  host  600mb of  ip's



Client Machine 1 -> connects to  host 1  - Scans  5k  - ends  - restarts  - if found valid -> print - else - continue - end

Client Machine 2 -> connects to  host 1  - Scans  5k  - ends  - restarts  - if found valid -> print - else - continue - end

Each machine scans its own subnet


Supports  Server Clustering  to maximize scanning times


Supports  SSL  Scanning

-----------------------------------------------------------------------------------------------------------




Client  ->

Reads IP Addresses from the server  and  displays if there valid or not in a file
Reads  Server  Header Information







Features:

Server - Pools the clients, Accepts unlimited connections, Queues the server ip list.
Client - Asynchronous processing - Request an ip whilst the other threads are processing. Checks the header for clearscada.
== SETUP ==
In main directory, for the CLIENT
Edit src/ServerConnection.java
Change 127.0.0.1 to the SERVERS ip. Save.
Go back to the parent of src
Make folder bin

javac -d bin src/*.java

== Copy contents of 'bin' to the shells / servers you want to set up the thread on ==
java -Xmx512m ScadaMain [THREADS]

== For the SERVER ==
In the 'Server' directory make bin folder
javac -d bin src/*.java

== Copy contents of bin to the main server ==
[sudo ]java -Xmx2048m Server



--------------------------------------------------------------------------------------------------------------


Run IPGen  to generate  all of the ip addresses  - writes to  ip's.txt



Download Link: http://www.mediafire.com/?xtxaw9qoq779mkx