Intro to OT/ICS Penetration Testing (Part 3): How IT Pentesting Factors Into OT

Value of the Information & Strength of the Argument

The video provides valuable insights into the intersection of IT and OT penetration testing, emphasizing the prevalence of Windows systems in OT environments and the relevance of IT attack techniques. The argumentation is solid, based on the author’s extensive experience and real-world examples, such as the case study of a vulnerable firewall. The step-by-step methodology is clear and practical, making it useful for practitioners. The author effectively argues that understanding IT penetration testing is essential for OT security, given that most attacks on OT networks originate from IT.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the content is based on practical experience rather than formal research, but it is well-structured and methodical. The sources cited are limited to the course materials and the author’s website, with no external references. The title accurately reflects the content, which is a tutorial on IT penetration testing from an OT perspective. The video does not include any public comments, so no analysis of audience feedback is possible.

The title accurately reflects the content, which focuses on how IT penetration testing techniques apply to OT/ICS environments.

8/10

The content is based on the author's extensive practical experience in OT/ICS penetration testing, with clear methodology and real-world examples. The video is instructional and provides actionable steps, but lacks formal citations or references to external sources, relying on the author's expertise.

• 00:00Introduction
• 01:25Why Are We Talking About IT Pentesting in an OT/ICS Cybersecurity Course?
• 01:56Case Study: The Case of the Vulnerable Firewall
• 05:42Many IT Attacks are Relevant in OT Environments - Especially with Windows Everywhere!
• 11:09IT Penetration Testing Methodology
• 13:09The Pre-Engagement Phase
• 13:28Defining Scope and Attention to Detail
• 19:53Determining Objectives Like Bypassing Endpoint Detection & Response
• 21:35Defining Rules of Engagement to Align with the Client's Needs
• 24:33Obtaining Authorization So Our Testing is Legal
• 25:48The Engagement Phase (The Fun Stuff!)
• 26:28Performing Reconnaissance and OSINT
• 29:35Passive Recon vs Active Recon
• 31:56Passive Recon with DNSdumpster
• 38:40Lab 3.1: Passive Reconnaissance
• 39:18Active Reconnaissance
• 40:21Active Scanning with Nmap
• 43:30Using the Hack the Box Environment for Learning
• 45:30Finding Live Hosts with Nmap
• 48:08Scanning & Enumeration: What Are We Looking For?
• 48:18IP Addresses, Open Ports, Services/Applications and Vulnerabilities
• 50:13Nmap Default & Service Scans
• 54:47Finding SMB Vulnerabilities with Nmap
• 57:35Exploiting Windows Vulnerabilities with Metasploit
• 1:04:17Hacking a Windows System in an OT/ICS Environment
• 1:05:04Using Meterpreter
• 1:06:59Gaining Shell & Resetting the Local Administrator Password
• 1:09:36Lab 3.2: Active Scanning & Enumeration
• 1:11:28Lab 3.3: Exploiting EternalBlue with Metasploit
• 1:11:54Post-Exploitation
• 1:15:45Lab 3.4: Post-Exploitation Activities
• 1:16:23The Post-Engagement Phase (Bringing Value to the Client)
• 1:17:23Writing a Successful Pentest Report
• 1:21:16Validating Remediation of Security Risks & Vulnerabilities
• 1:24:10Final Findings Meeting
• 1:28:40THANK YOU!!!

• Course Materials Download — Provided in the video description for downloading course materials.
• Newsletter Signup — Mentioned in the video description for subscribing to the author's newsletter.
• Live Training Sessions — Mentioned in the video description for scheduling live training.

• NIST SP 800-82 — Provides guidance on securing ICS, aligning with the video's emphasis on OT security.
• MITRE ATT&CK for ICS — Offers a framework for understanding ICS-specific attack techniques, complementing the video's content.