text
# Offensive Security Reconnaissance Continued with Public Facing Industrial Control System HMIs using Moondream
# Offensive Security Reconnaissance Continued with Public Facing Industrial Control System HMIs using Moondream
new_line
new_line
text
Building on my previous experiments with Moondream for physical security reconnaissance planning automation (
Building on my previous experiments with Moondream for physical security reconnaissance planning automation (
link
https://huggingface.co/posts/Csplk/926337297827024
https://huggingface.co/posts/Csplk/926337297827024
text
), I've now turned my attention to exploring the potential of this powerful image-text-text model for offensive security reconnaissance in the realm of Industrial Control Systems (ICS).
), I've now turned my attention to exploring the potential of this powerful image-text-text model for offensive security reconnaissance in the realm of Industrial Control Systems (ICS).
new_line
text
ICS HMIs (Human-Machine Interfaces) are increasingly exposed to the public internet, often without adequate security measures in place. This presents a tantalizing opportunity for malicious actors to exploit vulnerabilities and gain unauthorized access to critical infrastructure.
ICS HMIs (Human-Machine Interfaces) are increasingly exposed to the public internet, often without adequate security measures in place. This presents a tantalizing opportunity for malicious actors to exploit vulnerabilities and gain unauthorized access to critical infrastructure.
new_line
new_line
text
Using Moondream with batch processing (
Using Moondream with batch processing (
resource
https://huggingface.co/spaces/Csplk/moondream2-batch-processing
space
Csplk/moondream2-batch-processing
https://huggingface.co/spaces/Csplk/moondream2-batch-processing
text
), I've been experimenting with analyzing public facing ICS (
), I've been experimenting with analyzing public facing ICS (
resource
https://huggingface.co/datasets/Csplk/ICS_UIs
dataset
Csplk/ICS_UIs
https://huggingface.co/datasets/Csplk/ICS_UIs
text
) HMI (
) HMI (
resource
https://huggingface.co/datasets/Csplk/HMI
dataset
Csplk/HMI
https://huggingface.co/datasets/Csplk/HMI
text
) screenshots from shodan  to identify types of exposed ICS system HMIs, how they are operated and how malicious actors with access to these systems could cause damage to physical infrastructure. Feeding images of HMIs and pre-defined text prompts to Moondream batch processing successfully (unconfirmed accuracy levels) extracted information about the underlying systems, including
) screenshots from shodan  to identify types of exposed ICS system HMIs, how they are operated and how malicious actors with access to these systems could cause damage to physical infrastructure. Feeding images of HMIs and pre-defined text prompts to Moondream batch processing successfully (unconfirmed accuracy levels) extracted information about the underlying systems, including
new_line
new_line
text
1. **System type**
1. **System type**
new_line
text
2. **Possible Operation Details**
2. **Possible Operation Details**
new_line
text
3. **Malicious Actor Outcomes**
3. **Malicious Actor Outcomes**
new_line
new_line
text
Next steps:
Next steps:
new_line
text
* I have a longer and more in depth blog write up in the works that will cover the previous and this post's approaches for experiments for sharing via HF community blog posts soon.
* I have a longer and more in depth blog write up in the works that will cover the previous and this post's approaches for experiments for sharing via HF community blog posts soon.
new_line
text
* I plan to continue refining my Moondream-based tool to improve its accuracy and effectiveness in processing public facing ICS HMIs.
* I plan to continue refining my Moondream-based tool to improve its accuracy and effectiveness in processing public facing ICS HMIs.
new_line
text
* As mentioned before,  offensive security with moondream focused HF Space once its fleshed out. 
* As mentioned before,  offensive security with moondream focused HF Space once its fleshed out. 
new_line
new_line
text
Thanks again to 
Thanks again to 
mention
@vikhyatk
vikhyatk
text
 for the incredible Moondream model. 
 for the incredible Moondream model. 
resource
https://huggingface.co/vikhyatk/moondream2
model
vikhyatk/moondream2
https://huggingface.co/vikhyatk/moondream2
# Offensive Security Reconnaissance Continued with Public Facing Industrial Control System HMIs using Moondream

Building on my previous experiments with Moondream for physical security reconnaissance planning automation (https://huggingface.co/posts/Csplk/926337297827024), I've now turned my attention to exploring the potential of this powerful image-text-text model for offensive security reconnaissance in the realm of Industrial Control Systems (ICS).
ICS HMIs (Human-Machine Interfaces) are increasingly exposed to the public internet, often without adequate security measures in place. This presents a tantalizing opportunity for malicious actors to exploit vulnerabilities and gain unauthorized access to critical infrastructure.

Using Moondream with batch processing (https://huggingface.co/spaces/Csplk/moondream2-batch-processing), I've been experimenting with analyzing public facing ICS (https://huggingface.co/datasets/Csplk/ICS_UIs) HMI (https://huggingface.co/datasets/Csplk/HMI) screenshots from shodan  to identify types of exposed ICS system HMIs, how they are operated and how malicious actors with access to these systems could cause damage to physical infrastructure. Feeding images of HMIs and pre-defined text prompts to Moondream batch processing successfully (unconfirmed accuracy levels) extracted information about the underlying systems, including

1. **System type**
2. **Possible Operation Details**
3. **Malicious Actor Outcomes**

Next steps:
* I have a longer and more in depth blog write up in the works that will cover the previous and this post's approaches for experiments for sharing via HF community blog posts soon.
* I plan to continue refining my Moondream-based tool to improve its accuracy and effectiveness in processing public facing ICS HMIs.
* As mentioned before,  offensive security with moondream focused HF Space once its fleshed out. 

Thanks again to @vikhyatk for the incredible Moondream model. https://huggingface.co/vikhyatk/moondream2
👀
John6666 odyss3y rreed-pha adarshxs iky1e
➕
merterbak jaden2 efecelik odyss3y
🔥
vikhyatk ajibawa-2023