SCADAsploit

FRAMEWORK / ARCHITECTURE

Remote operations.
Industrial reach.

The Remote Commander, teamserver and beacon separate operator interaction, C2 coordination and activity in the assessed environment.

C2 components and connections

SCADAsploit / topologyLOGICAL VIEW
  1. 01 / OPERATOR INTERFACE

    Remote Commander

    Graphical client for framework operations.

  2. 02 / COORDINATION

    Teamserver

    Server-side sessions, modules and operator coordination.

  3. 03 / ASSESSED ENVIRONMENT

    Beacon / Agent

    Staged or stageless agent for remote operations.

IT

IT environment

Hosts, sessions and remote operations

IT → OT

Network pivot

OT / ICS environment

PLC · SCADA · HMI · Remote I/O

Conceptual architecture · Not a live networkLogical relationships only. Network placement and connectivity depend on the authorized assessment design.

Remote Commander

The graphical client gives the operator access to framework functions, sessions, assets and remote operations. Its interface keeps network context alongside operational output.

Teamserver

The server coordinates the distributed C2 environment. The documented client/server model supports collaboration, modules and payload handling.

Beacon / Agent

Staged and stageless agents provide the connection into the assessed environment. Published options support IT operations and network pivots toward reachable OT assets.

Industrial modules

Auxiliary and exploitation modules bring industrial-device and protocol knowledge into the assessment. Their use is defined by scope, connectivity and the behavior of the target system.

02 / FROM IT TO OT

Follow the connection.
Validate the boundary.

An illustrative assessment sequence, from an authorized IT foothold to industrial security validation. Each engagement defines its own scope, access and operational constraints.

  1. 01

    Initial access

    Establish the agreed entry point

  2. 02

    IT compromise

    Assess the enterprise foothold

  3. 03

    Beacon

    Connect the assessment agent

  4. 04

    Lateral movement

    Explore reachable systems

  5. 05

    Network pivot

    Cross the IT / OT boundary

  6. 06

    OT discovery

    Identify industrial assets

  7. 07

    Industrial target

    Test the scoped device

  8. 08

    Security validation

    Review controls and response

ASSETS / CONNECTIONS

The path, in context.

An example network view connects IT hosts with industrial PLC and HMI targets, alongside the listener and event panels.

SCADAsploit / discoveryPRODUCT INTERFACE
SCADAsploit network map connecting IT hosts with Schneider Electric PLC and HMI devices.
ASSET DISCOVERY Actual interface · Example environment