ICfinger
ICfinger is an industrial asset identification tool based on industrial control protocol fingerprinting scripts. It focuses on recognizing Modbus service fingerprints, particularly for Schneider PLCs. The tool utilizes the Umas protocol's 0x2 opcode for identification, establishing recognition rules through reverse engineering of the protocol.
Key Features:
- Modbus Protocol Recognition: Identifies various Modbus protocol machine information.
- Targeted Identification: Specifically designed for Schneider PLC models.
- Single and Multi-target Recognition: Supports both single and multiple target identification.
- Custom Rule Loading: Allows users to load specific rule libraries in JSON format.
- Output Options: Users can specify the output location for scan results.
Benefits:
- Enhanced Security: Helps in identifying industrial assets, improving security posture against potential threats.
- User-friendly: Simple command-line interface for ease of use.
- Open Source: Available on GitHub for community contributions and improvements.
Highlights:
- Written in Python, making it accessible for developers familiar with the language.
- Actively maintained with contributions from the community.
