SMS spoofing and Raspberry Pi Scada hacking

[@davidbombal]

// MENU // 00:00 - We're doing this in the real world! 00:24 - Back with OccupyTheWeb 01:38 - Overview //The Hacker's Dilemma 03:16 - The Plan//Destroying Evil Corp's Backups 06:10 - High Temperature Destroy Tape Backups? 07:10 - Social Engineering//SMS Spoofing 11:48 - Why This Could Work 13:04 - Comment!//Spoofing Services That Work? 143:53 - Setup//Raspberry Pi with Kali 15:25 - Virtual Machine Setup 16:01 - Netcat//Setting Up Hacking Pi 17:50 - Netcat//Connecting to Hacking Pi 18:43 - Options//Reverse Shell//Rogue WiFi AP 20:01 - Recon with Nmap 22:26 - OTW Real World Hack//Schneider 23:59 - Gaining Access to /etc/passwd 26:01 - After Publishing the Hack Online 28:48 - Scanning for PLCs 30:19 - Modbus CLI//Memory Probing Tool 31:34 - How This Could Be Used in Mr. Robot 32:29 - Cyberwar//SCADA Hacking Overlooked 32:55 - Summary & Notes 34:04 - SCADA Network Cabling 35:41 - SCADA Hacking//Research! 36:11 - The Challenge in Mr Robot 36:39 - Mr. Robot Hacks//Realistic? 37:11 - SCADA Hacking Sim? 38:16 - Resources to Learn SCADA 38:48 - More Mr Robot? Leave a Comment! Disclaimer: This video is for educational purposes only. May it be a warning to all of us. Secure your systems and do not connect unprotected systems to the Internet. In this video we discuss the hacks in Mr Robot Season 1 Episode 5. Which other episodes or technologies do you want us to cover in future videos? Please comment. // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: davidbombal.wiki/otw // Videos mentioned // Kali Linux install on Raspberry Pi: kzbin.info/www/bejne/hqK1h6Joo850lZo OTW Interview and Scada demo with Sombra_around_tech: kzbin.info/www/bejne/bHKoqHWKfKuEnMU // Previous video // Hack like Mr Robot Ep 1: kzbin.info/www/bejne/aarMhZKNgtGiqck // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info // Occupy The Web social // Twitter: twitter.com/three_cube // Occupy The Web books // Linux Basics for Hackers: amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh // Other books // The Linux Command Line: amzn.to/3ihGP3j How Linux Works: amzn.to/3qeCHoY // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[@Justin1337Sane]

Lets say AI someday goes rouge.. is there any hope left for humans or could it be hacked and stopped ?

[@mrwhosmynameagain]

@@Justin1337Sane Water

[@mrwhosmynameagain]

@@Justin1337Sane A backdoor could be left in it, but it could become sentient and erase it. We could just douse them with water though. I'm sure they would get smart and upload their code to a lot of very expensive server farms, thus making killing it cost us a fortune. But we could ultimately kill them with water if we really had to

[@Justin1337Sane]

@@mrwhosmynameagain Thanks that makes sense to me ..

[@ej5364]

M. . . .l

[@leesmith7547]

David you do so much for us! You motivate and educate at the same time. Thank you so much from all of us.

[@davidbombal]

Thank you Lee! You're welcome!

[@cy_wareye7395]

Indeed. That video make my day.

[@testimony7233]

Thank you once again....

[@saadhamid5609]

Very nice teacher and I want to buying your course

[@infotruther]

Amen

[@weidup]

YES! Finally, I’ve been waiting for this. Thanks so much guys, very interesting series, these are probably my favorite of your videos.

[@elementalkeed2339]

David thank you so much, I've learned a lot from your channel. From NAMIBIA🇳🇦🇳🇦

[@hamed9380]

I joined many Hacking channel but your channel is the best and different , your accent is very nice , you aren't filming or playing some role or having scenarios.👍 I hope you success and more money and good memories.

[@Kdaddyis]

Motivation + education+ entertainment is all about this video

[@SgtStarSlayer]

As an industrial electrician , SCADA is also being used on windmills, hydro damns, and solar panel grids.

[@angelalopez1461]

Thanks!!! and never stop doing what you greatly do!!!!

[@davidbombal]

Thank you!

[@HopliteSecurity]

This was next level. Thank you David for the amazing content and sharing this knowledge with the community. It truly makes a difference.

[@eval_is_evil]

Dont think this hack would work in real life scenario.

[@TheOriginalJohnDoe]

I absolutely LOVE these series. Keep them going! I’m a big fan of occupytheweb as well. Very soothing voice, great explanations and the last video of David with occupytheweb made me even buy occupytheweb his book, which was a really good read! Keep the content coming fellows! Now, let me go grab some chips, a coke and lean back and enjoy this amazing video.

[@davidbombal]

Happy to hear that John Doe!

[@zuna21]

@Fsociety Play around with the tool. Try it on your own wi-fi, it's very easy to use, but it's a great idea you mentioned, the tool is very effective

[@squatplugenthusiast3667]

I recently took a course called SCADS Systems Security funded by the NSA through 6 different universities. This is a very good basic summary of the offensive capability against PLCs.

[@amermoftah673]

Thank you sir, you are creative in every content you post, thank you again and your guest ❤️

[@aaronwhite1786]

Another great one! I found and tried reaching out to that company that showed up last time with their exposed network to inform them. I didn't hear back, so hopefully they know about it!

[@bytegroove]

Thanks!

[@arghyl]

Wow fantastic follow up! This should be a series like mythbusters but for hacking. Thank you for another great video!

[@firosiam7786]

Long last guess youtube really verified the he'll out of this vedios to finally let this be able to post I watched the whole series of Mr robot waiting for this vedio 😂

[@davidbombal]

Lots and lots of trouble getting this video sorted out 🙁

[@firosiam7786]

@@davidbombal u knw If u really have to edit major parts of this vedios out then why don't u put an edited version here and mayb an uncut version of the interviews on ur website after a few days like a theater release of a film and then a n uncut version coming out on an ott platform after a certain period if that is possible at all to do .

[@Synclon]

Thanks For The Video David 🙌🏼

[@davidbombal]

you're welcome!

[@faresjemai3153]

I'm an industrial software developer and all you've been talking about in true, once I built a whole factory system and all i needed is to plug in my laptop to the switcher, i changed the whole PLC code and installed 3 services in the server so simply without even having access to anything

[@Dr.DomAPI]

So much wait for this video 😅 thanks David

[@davidbombal]

Thank you. I hope you enjoy the video!

[@jimgorycki4013]

This is why you firewall the utility subnet. In my previous job, we created a VRF utility and firewalled off the system so that only a handful of techs that work on HVAC, lighting control, etc have access to this. And their workstation / laptop was constantly scanned for vulnerabilities.

[@patthetech]

Nice episode. Getting OT to have any security considerations is like herding cats then pulling their teeth. Most of them think vlans/airgaps are enough sadly. To the timeline comment about Mr Robot, I'm pretty sure there were a time or two the naration said about how this might take a while and then the shell popped and he said about how lucky that was. I know the technical director on a bts/commentary track acknowledged it was sped up exactly because no one wants to watch "real" hacking real time.

[@cartoonchannel5584]

Dude, this is the only video that works. Thanks for posting!

[@jeffalves3566]

Loved it! I'd like to see that one that he checks himself out from the hospital. Cheers!

[@ziegenminister]

Amazing Video like always. I love this format! As an idea for the next video maybe explain the sms hack in season 4. If its too awesome for KZbin maybe you can explain it on your website OTW.

[@MrRockNRoll]

These are my fav YT vids, please keep 'em going :D

[@dragonsage6909]

Great episode, I love OTW's stuff, great info! Ty

[@huyvuquang2041]

Very love the series of hacking with this guy explaining mr robot and demonstrate it in real life. Hope you guys keep up this good work

[@DrTumis]

I love this, you are realy motivate me to learn it, I appreciate it. Hacking is very interesting topic. Thank you so much!!

[@axelcodr]

I'm still reading his book for basics for Linux but I really enjoy it and have already learned how to do all basic and intermediate stuff on the bash console. It's tons of fun and I actually almost found an admin job at Siemens!

[@eval_is_evil]

I mean... the book Linux Basics for Hackers is extremely basic and leaves out 80% of stuff an admin should know. It doesnt really tackle in detail the network aspects or the OS vulnerabilities. Not sure how this almost landed you an admin job but I bet it was because of your previous knowledge. Dont under sell yourself dude.

[@gamereditor59ner22]

Oh snap!! I have that book, Linux Basic for hackers, and currently reading!!!! Love it everytime I read it!!! Recommend it!!!

[@bobnoob1467]

David, it means the world to me that you do this. Please keep it up.

[@yuhiahtyun5665]

I'm a big fan of OTW, thanks for this David !

[@lukementon9280]

I'd love the get Occupy the web's opinion on the bank hack in season 4. Love the videos David!

[@logansmith6215]

I was super excited for this video, then bummed when got pushed back but it was worth the wait!! love and appreicate everything you guys do!!!

[@darkguardian1314]

Much more informative than 2600 "Off the Hook" adio/podcasts out of New York... 2600 is like some college kids let loose in a radio station monkeying around and asking for donations.

[@bonjov8583]

David you are doing what is expected from a guru like you.. FABULOS!! may be the show has not considered that netcat has been replaced with ncat ... "Ncat is a feature-packed networking utility which reads and writes data across networks from the command line. Ncat was written for the Nmap Project as a much-improved reimplementation of the venerable Netcat. " taken from nmap project site

[@joellove6353]

Careful. Driving traffic off youtube towards content that isn't allowed on youtube seems like a dark grey area. Cheers Mate!

[@tubetrollin]

that edit at 29:20 was way too good haha

[@paulw7738]

Interesting to hear from a SCADA/ICS professional's perspective!

[@shriyanshgupta9951]

Thx a lot this is something i wanted to learn from long time !!! WE WANT MORE OTW VIDEOS !!

[@dj_kimarley]

very informative occupy the web💯 waiting to join the simulation lab

[@siraj3750]

LOT'S OF LOVE FROM INDIA♥️

[@Bjon10]

David this is awesome!! How about you have OTW explain every singe hack in the series, and make the videos a little big longer please just like they were in the beginning other than that keep rocking it kings ♥

[@naturalsoundlab4307]

I love this serij,plz continue and made part 3,4,5,......as much as u can😁

[@shounakghosh8595]

Oh man I've been waiting for this for so long!

[@ahmedahmedx9600]

OTW is amazing!!!, Thank you david, this channel is gold !!

[@Ray-mq7rb]

I've been spoofing calls from the Nokia days, I'm glad it's still chugging along!

[@ebukaanthony7418]

Teach me

[@jay_Zam]

Bro I really do appreciate you for this help, Thanks! I subscribed and Liked the video.

[@chanceleram]

Wow, I was expecting this episode so much !

[@photokarim]

Thank you David. Great content. Maybe you can show up the Mac OS hack (episode before last in season 4) if not mistaken. Where Elliot hack the other Elliot Mac OS machine.

[@gatty.]

Wow, some rich information in this one! Thanks OTW and David!

[@viderien7544]

Super interesting video ! I would like to suggest the hack in the very fist episode, fist scene: Elliot says that the onion routing protocol is not really anonymous. Could you explain how he could have done it ?

[@duckdruid440]

We want more Hack like Mr.robot videos and also david you are awesome

[@pratikdevale2517]

David sir please make a video on scammer calls and how to deal with them with our hacking skills to protect ourself and our whole family from this scammers and fraudents please

[@CollinsCurtis-ze4ms]

Damn. The piping of commands rocks✊✊

[@GameWithSNAKE]

Love Your content and also love you thank you for giving so so much knowledge ❤️❤️❤️

[@SavageScientist]

Man this shit is addictive, Love this series on one of my favorite TV shows.

[@cyberjynx]

Enjoying the video, you might want to blur his phone number in the ams spoofing section if thats not a fake 🙈

[@rhondaverma6358]

I wish I were smart enough to do this stuff. It amazes me.

[@richardclifford9641]

I know an sms spoofer that works

[@ebooooo1213]

Thanks a lot David for the amazing content that you always post. Can you make a video for the scene in Ron’s coffee of Mr. Robot? Thanks again

[@MichaelStepniewski]

Using the terminal multiplexer like "screen" could help mitigate those disconnect 30:00 issues since you could re-attach later without breaking the running commands.

[@brenno3735]

Can you please do a technical talk on how to open (suspected) malicious links safely and what you can learn from opening them.

[@Frankie_Freedom]

This is awesome stuff love watching these videos. Currently a sys admin wish I had the energy to dive deeper in CyberSec, just don't have the energy. So will continue watching the videos for now.

[@JoeElliotSA]

Excellent and interesting series of videos. 👍😁

[@abdoulieybojang3675]

Waw been such a while.... Love to the content...

[@davidbombal]

Thank you Adboulie!

[@MrCoSrenegade]

The "hello friend" moment at the beginning was awesome .... you both did your "homework". ^^ Entertaining and educational, thanks to the both of you!

[@MrCoSrenegade]

oh and your editors .... they did their homework too!

[@freedtmg16]

I've been waiting for this one!

[@chanceleram]

It's exciting to see OTW working, how he do the his magic...how he thinks..., helped us understand how the real life of a penetration tester is. Amazing!

[@seif9923]

I was wondering about sms spoofing and how its done, literally two days ago and you posted this lol ( out of curiosity btw lol )

[@samirnagal-f7q]

this is soo high quality!

[@prestonbaum5451]

Would be quite interesting to hear how to better protect ourselves from cvv penetration. If you guys could go into as much depth as possible. Alot of us would love to hear from your expertise.

[@cybericanintel]

Another Great video! Worth waiting for. Thanks David And MasterOTW you guys make learning so much fun. Forever a follower to you both!

[@SamTechYT]

Let's go To bad it's only 40min I guess the episode in Mr robot is around 40min so that's good enough but still haha amazing content

[@seb_gibbs]

book coming out in the winter, cool. I'm in Australia, its Winter here, we getting it now!

[@DerelictNacho]

What an awesome video series.

[@luan836]

duude this video is AWESOME!

[@petrusyp9604]

Thank you for this informative and educational video!

[@gothparadigm]

i'm still in the middle of my front-end aspirations; however, eventually, i'd love to branch off into this realm (ethical, of course) in the future. 💜

[@scholar7879]

YES! 😂 It's finally here

[@davidbombal]

Better late than never I suppose 😀 What a lot of hassle it has been 🙁

[@scholar7879]

@@davidbombal I would always come and check the Playlist to see if I had missed the notification loll.. Great great contents man.. We love it!

[@aniketsharma7333]

It's finally here 😀

[@davidbombal]

Better late than never I suppose 😀

[@TornTech1]

Im starting to think that OTW is the hacking consultant for Mr Robot! lol

[@HardcoreFixation]

Hey David, I recently discovered your videos and I'm absolutely hooked - they're brilliant! Thank you so much for these fascinating videos, you've inspired me to change my career!

[@assstatus6927]

Please , please please we want more episodes 😭😭😭

[@matthewyoung4103]

the card cloning bit is the easy bit in relative difficulty

[@namelastname_]

The sound here is tranquil.

[@think7022]

A lots wait for this

[@mvip4927]

It worked! Tank you sir.

[@alaxjak8760]

How can I buy the "Linux Basic For Hackers" and "Getting Started Becoming a Master Hacker" books from Bangladesh. I wanna buy the books.

[@ConnectionTimeout]

I’ve done HVAC controls for 15 years. Modbus almost is never used for HVAC. Modbus is a protocol widely used in electrical/power monitoring systems. BACnet ( Building Automation Control net ) is the most widely used protocol in the HVAC industry.

[@danpadro8883]

Really enjoyed this

[@JessieS]

Love these videos ❤️❤️

[@senfdame528]

Thank you, these are awesome videos. I love Mr Robot, and this "bts" is just great

[@rhondaverma6358]

I love, love, love your videos.

[@terryevans1976]

Yes, magnetism is affected by temperature. Even without destroying the tapes you can cause bit degradation and loss at higher temps.

[@drakezen]

Just love these videos! Can't wait for the next in the series

[@becomeanaccelerator9354]

Hey David I would like mr.Robot to take me through the courses of ethical hacking from scratch because I love it more than everything.

[@appher]

yes it works brother ! many thanks

[@miscellaneouszone]

Great video and very informative. Thanks David for great content.

[@priiv18]

David Did You Prefer Kali Or Parrot OS ?

[@anjanbora7943]

U r a genius. Lots of love to u.