OT CT (Ep. 15): Learning How to Attack OT/ICS with Labshock

OT CT (Ep. 15): Learning How to Attack OT/ICS with Labshock

by Mike Holcomb

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 Mike Holcomb 👥 27K 📅 January 28, 2026 ⏱ 60 min 👁 937 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

LabShockOT/ICSPLCHMIModbus

Summary

In this episode of OT Cyber Tuesday, Mike Holcomb presents LabShock, a free and lightweight virtualized OT/ICS environment created by Zach Hardurnhart. He walks through the installation process using Docker, then explores the main components: the HMI (human-machine interface) for monitoring and control, the PLC (programmable logic controller) running on OpenPLC, and the engineering workstation. He demonstrates how to interact with the HMI to control pumps, and how to access the PLC to view and modify its logic. He highlights the use of Modbus, an unauthenticated protocol common in OT environments, and explains how attackers can exploit it to gain control. He also shows how to use the engineering workstation to discover network details and configuration files. The session is practical and aimed at beginners, providing a hands-on introduction to OT/ICS security.

132 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical knowledge for anyone interested in OT/ICS security. It offers a clear, step-by-step demonstration of using LabShock, which is a free and accessible tool. The presenter explains key concepts such as HMI, PLC, and Modbus in an understandable manner, and shows real attack scenarios, such as stopping the PLC and observing the impact. The argumentation is solid, based on the presenter’s experience and the demonstration of the tool. However, it lacks depth in some areas, such as detailed exploitation techniques or defensive measures.

Scientific Rigor, Source Quality, Title Accuracy

The video is scientifically rigorous in its practical approach, but it does not cite formal sources. The presenter mentions LabShock’s GitHub page and other resources in the description, but these are not discussed in detail. The title accurately reflects the content, and the video is well-structured. The presenter’s expertise is evident, but the lack of citations and references to external sources limits the scientific rigor. The video is more of a tutorial than a research presentation.

178 words

Title / Content Match

The title accurately reflects the content: the video is about learning to attack OT/ICS environments using LabShock.

Quality & Reliability

7/10

The video is a practical tutorial by an experienced OT/ICS cybersecurity professional. It demonstrates the use of LabShock, an open-source virtualized OT environment, and explains key concepts such as HMI, PLC, Modbus, and attack vectors. The information is accurate and well-structured, but it is based on the presenter's experience and not on formal research or peer-reviewed sources.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • Newsletter signup — Mentioned for further learning resources
  • Free videos for learning OT/ICS cyber — Mentioned for additional educational content

Concurring Sources

  • LabShock GitHub repository — The official source for LabShock, providing documentation and installation guides.
  • OpenPLC Project — The open-source PLC used in LabShock, offering a platform for learning PLC programming and security.

Contribution & Novelties

The video provides a practical, hands-on introduction to OT/ICS security using LabShock, a free and accessible tool. It demonstrates real attack scenarios and explains key concepts in a clear manner. The main novelty is the use of LabShock as a learning platform, which is relatively new and not widely covered.

Pour aller plus loin :

  • LabShock GitHub repository — The official source for LabShock, providing documentation and installation guides.
  • OpenPLC Project — The open-source PLC used in LabShock, offering a platform for learning PLC programming and security.
  • Modbus Protocol — An overview of the Modbus protocol, its history, and its security implications.
  • GRFICS — Another virtualized OT/ICS environment for security research, mentioned in the video.

115 words

Radar Profile

The radar profile shows high scores in information quantity and quality, indicating a content-rich tutorial. The technical level is moderate, suitable for beginners, and the reliability is good, though not based on formal research. The overall balance suggests a practical, hands-on resource.

Reliability 7/10

💬 Sur les 0 commentaires analysés, aucune tendance n'est disponible.