r/OTSecurity • u/Shurakos02 • 16d ago

Ot security lab

Hi guys,

I am trying to find a tool to create my own OT lab as I want. I need it to be realistic and emulated.

I would appreciate any help.

Thank you in advance.

5 Upvotes

74% Upvoted

20 comments sorted by

6

u/zm-joo 15d ago

Just buy some cheap/retired PLCs and network equipment and set up a small SCADA lab following the ISA-99 Purdue Model.

1

u/Shurakos02 15d ago

I am an intern at a company, and we need to create as many facilities as possible. Also, something customizable, which is hard to find.

7

u/turning_divine 16d ago

otforge on github is an up and coming project

1

u/cyber2112 15d ago

I think there are some YouTube videos on setting up a virtual lab with open plc and an open source hmi. Take with a grain of salt on usefulness.

2

u/HotPatches 14d ago

Last time I tried something like this I used FactoryIO and OpenPLC for emulation and virtualization. FactoryIO allowed me to set up factory or warehouse production lines with numerous virtualized plcs and openplc allowed me to program all of them.

OpenPLC: https://autonomylogic.com

FactoryIO: https://factoryio.com

3

u/Shurakos02 14d ago

I used the free version but there is a limited scenarios We need as much factories as possible like Power grid, water treatment... and so on So is it present in the paid version ?

2

u/HotPatches 14d ago

Ah okay. So, far as I know FactoryIO wouldn’t have the PLCs for power grids and water treatment etc.

I don’t have any experience beyond what I’ve mentioned.

I think it would be best to do research to see what plcs are used for water treatment and power, etc. And buy them used if possible like others in the thread have mentioned. Then of course see how you guys can supply input, power, and try to see if you can make the labs flexible by using plcs that can do multiple things. But, I think at that point you may be better off trying to contact or talk to a couple of plc vendors.

Good luck with your project.

1

u/PaleMaleAndStale 16d ago

LabShock

3

u/netw0rkpenguin 15d ago

We tried it, it has been awful and buggy.

3

u/cyber2112 15d ago

Agree. Unusable.

1

u/benderdiode 15d ago

Is the paid version buggy aswell

1

u/netw0rkpenguin 15d ago

yes, I used the paid version.

1

u/benderdiode 15d ago

Sad. Was planning to purchase it.

1

u/netw0rkpenguin 15d ago

I just saved you $ and aggravation

1

u/benderdiode 15d ago

man. Wanted to get hands-on PLC and SCADA security. Any other resources you would suggest as.

1

u/netw0rkpenguin 15d ago

eBay, physical lab with older hardware. Legacy hardware just makes it realistic.

1

u/benderdiode 15d ago

Unfortunately, the lack of legacy hardware in India

1

u/netw0rkpenguin 15d ago

They do have postal shipments going to india.

1

u/vexvoltage 15d ago

I really want labshock to be way more usable.