Heavy Metal Hacking w/ Tyler Webb @ Dragos - HTB Stories #22

ICS/OT penetration testing focuses on identifying vulnerabilities in industrial control systems with an emphasis on safety, requiring a specialized approach that combines traditional pen testing techniques with knowledge of operational technology environments.

Key Takeaways:
• ICS pen testing differs from traditional pen testing by prioritizing safety and physical impact, requiring a "tiptoe" approach in operational environments where system disruptions could have real-world consequences MM:SS
• Three main career paths into ICS security include working for vendors, consulting firms like Dragos, or asset owners/operators which provides valuable hands-on experience with industrial environments MM:SS
• The HackTheBox Alchemy lab, developed in collaboration with Dragos, provides a realistic environment to practice ICS pen testing skills, allowing users to progress from corporate networks through to impacting industrial control systems MM:SS

ICS pen testing requires continuous learning due to the complexity of industrial environments and protocols, but offers a rewarding career path focused on protecting critical infrastructure.

Sources:

• MM:SS Discussion on ICS/OT pen testing fundamentals and safety considerations
• MM:SS Career paths and entry points into ICS security field
• MM:SS Overview of HackTheBox Alchemy lab development and purpose