Industrial Attack Simulation Engine for OT Validation
Built on a ruggedized industrial hardware platform as its validation carrier, it performs controlled industrial attack simulations and verification tests. It helps product teams and factories validate OT protection effectiveness and supports evidence collection requirements for IEC 62443, CRA, and SEMI E187.
Hardware
Hardware Teardown
Scroll to take the current unit apart: fanless aluminium heatsink, chassis body, front I/O faceplate, and DIN-rail bracket.
Scroll to disassemble
159 × 132.5 × 35 mm, 0.78 kg aluminium-alloy chassis that barely takes cabinet space.
The fin stack is the chassis — no fan, no filter, nothing to service in a dusty plant.
Intel Celeron J6412 quad-core, 8 GB LPDDR4x, M.2 storage, and all four NIC controllers on board.
LAN 1–4 (3× 2.5GbE + 1× GbE) tap OT segments, USB 3.2 Gen2 exports evidence, HDMI drives an on-site console.
Clips straight onto a 35 mm DIN rail — deploys inside the field control cabinet, no rack required.
Connect & Operate
Patch a cable into any front-panel LAN port and open the management console from a browser on the same segment — no agent to install, no external cloud service. Pick a port below to try it.
INTERACTIVE Click a LAN port on the ICSCracker to patch it in
No link
First screen after linking: device and network topology, task status, hardware health, signature version.
http://<ICSCracker-IP>:8080/
How it runs
Every engagement is a saved, repeatable case. Results map onto the frameworks automatically, and the report exports in one click — no more rebuilding a document out of scattered screenshots and notes.
Pick a step to see the actual screen
A two-step wizard: the case details, then the topology. Scope is SVV-3 and/or SVV-4; the target takes an IP, vendor, model and firmware version; device type is a pick from PLC, HMI, SCADA and RTU through to gateways and switches.
Clear IEC 62443-4-2 and friends before the product ships.
SEMI E187 compliance checks and incoming equipment acceptance.
Penetration testing and vulnerability scanning before handover.
Standards audits, compliance assessment, auditable deliverables.
Coverage
From OT and IIoT protocols through to plain IT networking — and every result maps straight onto IEC 62443, SEMI E187 and EU CRA clauses as deliverable, structured evidence.
A complete path from component to system level, filed by clause and usable as 4-2 component evidence.
Ships with the E187 requirement data: assess clause by clause, get a compliance rate, export a standalone report for acceptance and supply-chain audits.
The SBOM-centred workflow is usable today; the CRA test case itself is still in development, so teams can start building SBOM and VEX assets ahead of the deadline.
Over twenty protocols across OT, IIoT and IT networking.
Plans & Licensing
One platform, three ways to take delivery: install on your own host, buy the appliance preloaded, or image machines in production from the installer ISO. Licence for one year or three.
You have the hardware; take the platform
Quote on request Quote on request
Get a quotePreloaded hardware, online out of the box
Quote on request Quote on request
Get a quoteImage machines in production, many at once
Quote on request Quote on request
Talk to salesPrices exclude tax. Plugins (OT protocol testing, Web/AIoT penetration, port scanning, compliance rules) are licensed per module; hardware and software licences can be purchased separately.
The shipping hardware model changes with supply; the quotation is the binding specification.
Software & Reports
五步驟導覽走過的是一次檢測從頭到尾的路徑；這裡是平時在用、但不屬於那條路徑的三個畫面。
System Dashboard
設備與網路拓撲、任務與掃描狀態、授權、硬體健康與特徵碼版本一頁掌握，儀表板上的設備視圖即為現行機型。
Report Management
集中管理 IEC 62443 與 EU CRA 測試案例，依法規、狀態與結果篩選，一鍵預覽或下載合規報告。
Security Health Check
依網路架構、設備存取、組態維護等六大章節檢核 OT 場域安全基線，案例進度與逐項完成度即時追蹤。
Deployment & Attack Scenario
An authorized engagement built around the ICS-Cracker red-team testing platform: security and OT operations staff define the test scope and authorize the exercise; in an authorized, controlled and traceable environment the platform runs vulnerability validation, attack simulation, lateral movement and ICS-protocol testing against the enterprise (IT) and industrial (OT) networks; and it returns a findings list, risk report and remediation recommendations to strengthen IT/OT security resilience.
Attack Frameworks
Cyber Kill Chain
ICSCracker 可把驗證情境映射到攻擊從偵察、投遞到影響的完整路徑，幫助團隊確認每一個防護控制到底攔在哪一段。
模擬攻擊者蒐集資產、協定與通訊關係，驗證環境是否暴露過多資訊。
建立協定封包、更新檔案或惡意載荷情境，檢查防護是否能辨識異常輸入。
重現弱點利用與未授權操作流程，觀察設備、策略與警示機制的反應。
驗證更新、配置與權限機制是否可能被用來建立持續控制。
模擬控制指令異常、DoS 或流程干擾，確認系統在最後階段的阻斷與紀錄能力。
ATT&CK Matrix for ICS
ICSCracker 不是隨機做攻擊，而是依據 ATT&CK Matrix for ICS 把測試分類，讓研究、驗證與報告都能對應到共同語言。
對應外部連入、維護通道與網段橫向移動的驗證，確認邊界與分段控制是否生效。
驗證攻擊腳本、協定命令或異常更新流程在設備與平台上是否會被攔截。
聚焦對控制邏輯、設定與流程參數的干擾，檢查 OT 安全機制如何降低製程風險。
驗證在告警、監控或應變能力遭削弱時，系統是否仍保有可追蹤的證據。
把停機、通訊中斷、異常控制與設備風險納入測試，形成最終報告與證據輸出。
Specifications
Our expert team is ready to provide product consultation and technical support.
