ethernetip-pentest

name

ethernetip-pentest

description

How to enumerate and pentest EtherNet/IP industrial devices on port 44818. Use this skill whenever the user mentions EtherNet/IP, industrial control systems, Rockwell Automation, PLC devices, or port 44818. Also trigger for ICS/SCADA reconnaissance, factory automation security testing, or when investigating industrial Ethernet protocols. Make sure to use this skill for any pentesting task involving industrial automation networks, even if the user doesn't explicitly name EtherNet/IP.

EtherNet/IP Pentesting

A skill for enumerating and testing EtherNet/IP industrial control system devices.

What is EtherNet/IP?

EtherNet/IP is an industrial Ethernet networking protocol used in industrial automation control systems. Developed by Rockwell Automation and managed by ODVA, it ensures multi-vendor interoperability in:

• Water processing plants
• Manufacturing facilities
• Utilities and power systems
• Factory automation networks

Default port: 44818 (TCP/UDP)

When to Use This Skill

Use this skill when:

• You need to enumerate industrial control system devices
• Port 44818 is open on a target
• You're testing ICS/SCADA security
• You encounter Rockwell Automation or Allen-Bradley devices
• You need to identify EtherNet/IP device information
• You're doing industrial network reconnaissance

Enumeration Workflow

Step 1: Identify EtherNet/IP Devices

First, confirm the target is running EtherNet/IP:

# Check if port 44818 is open
nmap -p 44818 <target-ip>

# Verify with service detection
nmap -n -sV -p 44818 <target-ip>

Step 2: Run Enumeration Scripts

Use the bundled enumeration script for comprehensive device discovery: