论坛 › 工控物联网安全::『Internet of things security』 › 工控安全之某地区燃气系统弱口令(内网漫游\涉及银行\亿家能\小区等场所)

admin 发表于 2022-3-31 03:29:04

工控安全之某地区燃气系统弱口令(内网漫游\涉及银行\亿家能\小区等场所)

<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;word-break:break-all;">
        <span style="color:black;font-size:10.0pt;">德州中燃生产运营系统</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<div style="background:#F8F8F8;border:solid #CCCCCC 1.0pt;padding:9.0pt 9.0pt 9.0pt 9.0pt;">
        <fieldset style="border:1px solid #CCCCCC;margin:0px auto;padding:0px;width:870px;">
<pre style="background:#F8F8F8;border:none;line-height:13.5pt;overflow:hidden;overflow-wrap:break-word;padding:0cm;"><code><span lang="EN-US" style="font-family:&quot;color:#333333;background:#F8F8F8;">**.**.**.**:8085</span></code><span lang="EN-US" style="font-family:&quot;color:#333333;"></span></pre>
        </fieldset>
</div>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
admin/123456<br />
</span><span style="color:black;font-size:10.0pt;">系统配置图</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271946578467739dfb577bca30f89e41b4c950e7.png" target="_blank"><img width="554" height="347" src="https://www.2k8.org/content/uploadfile/202203/31/74ab7051.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">下面的有工艺图</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271947337485a761d34566c26ebdb6bf68c98e8d.png" target="_blank"><img width="554" height="305" src="https://www.2k8.org/content/uploadfile/202203/31/ee47b6ba.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27194744b7c8f2da3fe19095f291776c84515742.png" target="_blank"><img width="553" height="334" src="https://www.2k8.org/content/uploadfile/202203/31/239b4748.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27194752b5ba981e13c0ae9cb52a4732fc807ffa.png" target="_blank"><img width="554" height="305" src="https://www.2k8.org/content/uploadfile/202203/31/2500c434.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27194800434198c74e9ef4d76d6a0af777a1b5ab.png" target="_blank"><img width="554" height="321" src="https://www.2k8.org/content/uploadfile/202203/31/ab2169a7.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">涉及的用户</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271948433a37873e01f920e599614dca396f15f6.png" target="_blank"><img width="554" height="411" src="https://www.2k8.org/content/uploadfile/202203/31/e597d92a.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<div style="border:none;border-left:solid #999999 4.5pt;padding:0cm 0cm 0cm 0cm;">
        <h3 style="-webkit-text-stroke-width:0px;border:none;font-variant-caps:normal;font-variant-ligatures:normal;margin-bottom:0cm;margin-left:0cm;margin-right:0cm;margin-top:11.25pt;orphans:2;overflow-wrap:break-word;padding:0cm;text-decoration-color:initial;text-decoration-style:initial;text-indent:7.5pt;widows:2;word-break:break-all;word-spacing:0px;">
                <span style="color:black;font-size:10.5pt;font-weight:normal;">漏洞证明：</span><span lang="EN-US" style="font-size:10.5pt;font-family:&quot;color:black;font-weight:normal;"></span>
        </h3>
</div>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span style="color:black;font-size:10.0pt;">下面的是内网漫游，三台机器密码相同，说明装了相同的工控软件，也说明是三台工控系统！</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">由于是</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">win2003</span><span style="color:black;font-size:10.0pt;">，所以直接用</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">mimikatz</span><span style="color:black;font-size:10.0pt;">得到密码</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
dzies/dZ_2015%<br />
</span><span style="color:black;font-size:10.0pt;">顺利登陆系统</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27195152587ef3fadf0498d9cf4a9e06dda4d61a.png" target="_blank"><img width="553" height="391" src="https://www.2k8.org/content/uploadfile/202203/31/60a4e70a.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">人机会话</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27194942f7f18b9658573e5ce811993ad9e48b8f.png" target="_blank"><img width="554" height="328" src="https://www.2k8.org/content/uploadfile/202203/31/846dead3.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
**.**.**.**</span><span style="color:black;font-size:10.0pt;">远程也开着，猜测密码相同</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271951387f09685e86e76ffa31e753b1f61f3244.png" target="_blank"><img width="553" height="342" src="https://www.2k8.org/content/uploadfile/202203/31/8321a57e.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27195109983648531c19521f28499fd5a658d4d1.png" target="_blank"><img width="553" height="391" src="https://www.2k8.org/content/uploadfile/202203/31/45c85739.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271951224dc2f77654ada99081ce5c90a0fdb5d0.png" target="_blank"><img width="553" height="433" src="https://www.2k8.org/content/uploadfile/202203/31/46302894.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
**.**.**.**</span><span style="color:black;font-size:10.0pt;">相同</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27195252371ad878a78ef6a1c5baeb847d199f91.png" target="_blank"><img width="553" height="367" src="https://www.2k8.org/content/uploadfile/202203/31/e69983c2.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/271954516978275f459778cf6ae4901d3eaef79f.png" target="_blank"><img width="553" height="417" src="https://www.2k8.org/content/uploadfile/202203/31/26e5febf.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/2719543980ff1b29a6065f9be476d32ac7d47dd5.png" target="_blank"><img width="553" height="414" src="https://www.2k8.org/content/uploadfile/202203/31/44032edb.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/2719542029a3c528a1c479716ad2dcde5382f6e9.png" target="_blank"><img width="554" height="426" src="https://www.2k8.org/content/uploadfile/202203/31/8fa6680f.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27195425363c47a2e9b826ccb81fe6ff54bb3eba.png" target="_blank"><img width="553" height="380" src="https://www.2k8.org/content/uploadfile/202203/31/54ad204e.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201512/27195430d768b1c43c6952e415dda342eebca49f.png" target="_blank"><img width="553" height="369" src="https://www.2k8.org/content/uploadfile/202203/31/ca14dddc.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>

查看完整版本: 工控安全之某地区燃气系统弱口令(内网漫游\涉及银行\亿家能\小区等场所)