Refinery raid

This blog post provides a step-by-step lab guide for setting up the Labshock virtual oil refinery environment and demonstrating OT attack techniques against PLC/SCADA systems, including discovering services, validating access to port 502, and using Modbus TCP with mbtget and a Python script to read and toggle pump states. It highlights common weaknesses such as default credentials and Modbus’s lack of authentication, briefly relates the exercise to real-world ICS incidents like FrostyGoop, and underscores the importance of monitoring and stronger defensive controls.