Industrial control systems have undergone an evolution from being isolated systems to being part of a large interconnected network, which makes them more exposed to potential cyberattacks. The services that are exposed to the internet (by design or by misconfiguration) can easily be found by tools that are continuously scanning the internet for connected devices, like Shodan. This makes it no longer feasible to rely on ‘security by obscurity’

This year BruCon organized its “0x0B’th” (eleventh in hexadecimal) yearly spring trainings. Toreonite Wouter Coudenys decided to register for the ‘Hacking and Securing Cloud Infrastructure’, as a way to explore a specialization in the line of webapp pentesting.