Practical Industrial Control System Penetration Testing (Udemy.com)

It would be good to have a Glossary section or starting with Intro of ICS/OT, PLC, MODBUS atleast if not SCADA or need to remove "or Interest" part after Basic knowledge. The lab doesn't work and needs some update. Scripts were giving errors, hence ran the manual commands. While, Kali system works fine Ubuntu still didn't work. Will try the exact version with VirtualBox in the advanced course now but all won't be using it while VMware is free now. Overall the course is fine to get a general idea but not for entire beginners who aren't aware of nmap, msfconsole etc and other security concepts. Surely, it can be improved with added content of 2-3 hours to be the Top course on Udemy for ICS.

This course has been very useful. Although I come from an OT background and am still new to cybersecurity, I found the material easy to follow. The section on IEC 104 penetration testing was especially interesting, as I often work with it in SCADA systems. I hope there will be more courses like this, especially on IEC 61850, which is becoming widely used in electrical OT systems.

grear course, but some of the material needs checking e.g. ifconfig as specified in the previous chapter no longer works in kali and needs to be replaced with ip addr the siemens simatic emulator crashed out with a segmentation fault - it turned out to be an incorrect network interface name in line 3 of the script where the ip addr is obtained Course its self is great though - really enjoying it.

Am a beginner in the field of ICS/OT and wanted to learn practical aspect of ICS/OT Penetration Testing. The course equipped me to learn about testing real life [although simulated] ICS devices. And final Red team assignment was icing on the cake, reminded me of Matrix 2 movie scene of shutting down Power Plant, although here we successfully triggered the safe shutting sequence.

I just completed the Practical Industrial Control System Penetration Testing course on Udemy. This course was offered to me by Marcel Rick-Cen, whom I consider one of the best mentors and trainers in the fields of ICS, OT, and embedded system penetration testing. Mentors in this domain are rare, and I highly recommend his courses, which are rich in practical exercises using free open-source tools, without spending a fortune on setting up a lab with PLCs or attending dull $2,000-a-day training sessions.

It's a great course for anyone who wants to learn about security and pen testing. I enjoyed every lecture. The only challenge that i had is to set up conpot and was not able to resolve it using ubuntu. i found an alternative solution using Docker, but it took me a while to figure it out, which in itself was useful learning experience.

I enrolled in this Udemy course with high hopes of gaining insight into ICS pentesting, only to find myself facing several challenges that hindered my learning experience. The course was advertised in English, but to my surprise, a portion of the content was presented on a German PC, with references to Germany's Federal Office for Information Security. While following along with the PC settings, the presenter, though speaking English, was using a PC configured with the German language. I would have expected a more international approach to the subject matter. Furthermore, the heavy reliance on Linux without proper clarification or introductory guidance makes the course inaccessible for learners with limited Linux experience. While I consider myself proficient in Linux, I empathize with those who struggled to navigate the Linux-centric content without adequate support. Additionally, much of the information presented in the course can be easily found for free on platforms like YouTube, often with better explanations and real-life examples. For instance, while the course briefly touches on tools like nmap, the explanation is insufficient, leaving out crucial details about the practical implications of using certain commands or switches in real-world scenarios. The absence of supplementary materials, such as notes, exacerbates the learning curve. Learners are left repeatedly pausing the course to transcribe commands, disrupting the flow and efficiency of learning. In conclusion, I would only recommend this course to individuals already well-versed in Linux and willing to overlook its shortcomings. For those lacking Linux proficiency or seeking comprehensive and well-structured content, alternative resources may offer a more rewarding learning experience.

This course is giving me understanding about how to perform penetration test on ICS with easy to understand. Details explaination from the devices in ICS till how to enumerate those devices. Really recommended course for those who want to start to be a cyber security professional in ICS/OT. Please added more deeply course. Thank you!

This is a short and sweet course about how to setup small testbeds in our own machines to simulate industrial network such as modbus, IEC104, etc. I really like the approach and presentation style of the instructors. The contents are very clear, and show the main points without wasting time talking irrelevant contents. If you are just curious about OT or ICS pen-testing, it is a great course.

nice practical pen testing with Kali. I was already aware of all available ICS scripts and use of nmap. A small sidenote: a lot of these exploits are already covered by a firmware update from the PLC Vendors. Also some protocols like Modbus are indeed "open", so I you know the protocol header structure, it's easy to read and write memory in the PLC. I don't see this as "hacking" a PLC, it's just there as a normal feature and the automation netwerk should be completely seperated from office or worse internet network. BTW. Modbus TLS is on it's way. If you want to explore for example Modbus and Schneider PLC's, check out the reverse engineering of the UMAS protocol layer by Schneider, this should get you way further than just some banner grabbing & read/write holding registers :-D Looking forward to see new practical material being published and thanks for the free course.