Tip

AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:HackTricks Training AWS Red Team Expert (ARTE)
GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training GCP Red Team Expert (GRTE) Azure ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks ์ง€์›ํ•˜๊ธฐ

ํ”„๋กœํ† ์ฝœ ์ •๋ณด

EtherNet/IP๋Š” ์‚ฐ์—… ์ž๋™ํ™” ์ œ์–ด ์‹œ์Šคํ…œ์—์„œ ์ผ๋ฐ˜์ ์œผ๋กœ ์‚ฌ์šฉ๋˜๋Š” ์‚ฐ์—… ์ด๋”๋„ท ๋„คํŠธ์›Œํ‚น ํ”„๋กœํ† ์ฝœ์ž…๋‹ˆ๋‹ค. 1990๋…„๋Œ€ ํ›„๋ฐ˜ Rockwell Automation์— ์˜ํ•ด ๊ฐœ๋ฐœ๋˜์—ˆ์œผ๋ฉฐ ODVA์— ์˜ํ•ด ๊ด€๋ฆฌ๋ฉ๋‹ˆ๋‹ค. ์ด ํ”„๋กœํ† ์ฝœ์€ ๋‹ค์ค‘ ๊ณต๊ธ‰์—…์ฒด ์‹œ์Šคํ…œ ์ƒํ˜ธ ์šด์šฉ์„ฑ์„ ๋ณด์žฅํ•˜๋ฉฐ ์ˆ˜์ฒ˜๋ฆฌ ์‹œ์„ค, ์ œ์กฐ ์‹œ์„ค, ์œ ํ‹ธ๋ฆฌํ‹ฐ์™€ ๊ฐ™์€ ๋‹ค์–‘ํ•œ ์‘์šฉ ํ”„๋กœ๊ทธ๋žจ์—์„œ ์‚ฌ์šฉ๋ฉ๋‹ˆ๋‹ค. EtherNet/IP ์žฅ์น˜๋ฅผ ์‹๋ณ„ํ•˜๊ธฐ ์œ„ํ•ด TCP/44818์— **์‹๋ณ„ ๋ฉ”์‹œ์ง€(0x63)**๋ฅผ ํฌํ•จํ•œ ์ฟผ๋ฆฌ๊ฐ€ ์ „์†ก๋ฉ๋‹ˆ๋‹ค.

๊ธฐ๋ณธ ํฌํŠธ: 44818 UDP/TCP

PORT      STATE SERVICE
44818/tcp open  EtherNet/IP

์—ด๊ฑฐ

nmap -n -sV --script enip-info -p 44818 <IP>
pip3 install cpppo
python3 -m cpppo.server.enip.list_services [--udp] [--broadcast] --list-identity -a <IP>

Shodan

  • port:44818 "product name"

Tip

AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:HackTricks Training AWS Red Team Expert (ARTE)
GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training GCP Red Team Expert (GRTE) Azure ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks ์ง€์›ํ•˜๊ธฐ