OSINT for ICS/OT - Complete 10+ Hour Course - Part 6 (Traditional Search Engines for OSINT)
While we'll be looking at specialized search engines (e.g., Shodan, Censys, openinframap) in our next section, this part focuses on using traditional search engines such as Google to find ICS/OT assets which are exposed to the Internet.
From the NSA's ELITEWOLF project to the Google Hacking Database hosted on ExploitDB, we'll run through some simple Google searches for finding exposed assets.
00:59 - Google Dorks
03:42 - Google Advanced Operators
07:35 - Google Hacking Database (GHDB)
13:08 - Finding Live PLCS with Google
22:28 - Creating Your Own Google Searches for ICS/OT Assets
25:43 - Investigating Live Programmable Logic Controllers (PLCs)
28:41 - Creating a GeoIP Locator with ChatGPT
32:00 - Further Research for Mapping PLC Internet Connections
33:39 - Bing
35:25 - DuckDuckGo
36:23 - THANK YOU!!!
Thank you for watching!!!
Looking for more on ICS/OT cyber security?
Mike Holcomb
linkedin.com/in/mikeholcomb
mikeholcomb.com
[email protected]
/ @utilsec
github.com/utilsec