Who am I

There is a critical equipment on the network, retrieve as much information as possible about it. The flag is an hardware information in ECW{...} format.

Introduction

Who am I is an easy network challenge from the ECW 2025.

When we start the challenge, we have the text “7port” that appears:

Which is a reference to “Siemens S7 PLC Devices”

And we have an nmap script available for that kind of protocol:

https://github.com/digitalbond/Redpoint/blob/master/s7-enumerate.nse

Scan

The first thing we can do is scanning with a script:

nmap --script-trace --script ./s7-info-2.nse -p 33204 challenges.challenge-ecw.eu

Hum, ok. The first thing we need to do is changing the service port in the nse file:

Then, we can start the nmap script for the challenge:

Flag: ECW{FRLCUR289}