Siemens LOGO! 8 PLC Password Hacking

[@ThanhTuanPhanAutechvn]

Look like new verison Logo 8 ES4 has closed 10005 port,but still got 135 port opened but when we try this new port all user and password are empty

[@chrisfor]

Go everything to work and have list of passwords now but the program password begins with the number 7 and the password field only accepts alpha characters? Am I missing something here?

[@mitielo]

seguendo il vostro consiglio non riesco a sbloccarlo la porta 10005 risulta bloccata avete qualche suggerimento

[@TuneMineCraft]

It doesnt work, it says 10005tcp closed stel

[@behzadrajabi3008]

When I consider the password, port 10005 is closed, but when I don't consider the password, the port is open.

[@idea22yt]

Hi, is this still working or it was fixed with a firmware uodate, or Soft Comfort 8.3 or at least for the new Logo hw version 8.3? thanks

[@jawharbenzarti5462]

hi did you found a solution for 8.3? thx

[@bartdereu9267]

Is there a way to just disable passwords? I'm only using the plc's in a local network and it's a pain to have to enter that pasword over and over again.

[@OrinMoyer]

does this work via the usb cable? what software are you using to ping? work on windows 10?

[@SySSPentestTV]

This attack works via the Ethernet connection using our developed Nmap script "slig" (github.com/SySS-Research/slig). The tool used for pinging the device is the iputils tool "ping".

[@mitja8572]

Hello, is this possible also in Windows?

[@yohannhudon9470]

hello, i've try this cheat, but it doesn't works on windows 10, have you an idea ?

[@hongthetong1143]

Hello! Please tell us what software you use to ping LOGO

[@SySSPentestTV]

In the video, the command line tool ping on a Linux system (Arch Linux) is used to ping the LOGO! 8

[@hongthetong1143]

@@SySSPentestTV Please share, to run on Windows, what is the command line syntax? Thank you very much

[@gayu1350]

How to reset password in seimens office laptop? If it forgot ? If u know pls share here

[@wpaulini51]

Boa noite. Como descobrir a senha no windows

[@fedup545]

I tried it and (thx god) did not work. I can see passwords but they do not mean anything nor work on the plc.

[@SySSPentestTV]

Have you extracted the correct cryptographic key as mentioned in our PoC software tool? A wrong cryptographic key will obviously result in wrongly decrypted password information.

[@user-dc9qx5ij3v]

@@SySSPentestTV I have tried des-ede3-cbc, des-ede3, des-ede3-cfb , des-ede3-ofb, nothing works, What are I´m missing...?

[@SySSPentestTV]

@@user-dc9qx5ij3v It's DES-EDE3-CBC. Maybe you are not using the correct 3DES key extracted from the LOGO! Soft Comfort software.

[@mahadevan3039]

How I will buy the software?

[@SySSPentestTV]

@@mahadevan3039 You can find further information about the LOGO! Soft Comfort software including demo versions for different operating systems here: new.siemens.com/global/en/products/automation/systems/industrial/plc/logo/logo-software.html

[@peterevenhuis2663]

Old news this is known to any serious user, same is valid for melsec or ABB. PS the Russian friends mad a nice tool years ago

[@kholajanala9102]

can you give me your email or any medium to contact with you. i need some information about melsec hack.

[@AndresMarquezouyeah]

Awesome, it works.