Enumerating Omrom PLC devices

Omrom PLC devices use the protocol FINS that communicates over UDP or TCP to control machines on the network. The Nmap Scripting Engine can enumerate these devices and obtain additional information.

This recipe shows you how to enumerate Omrom PLC devices with Nmap.

How to do it...

Open your terminal and enter the following Nmap command:

$ nmap -Pn -sU -p9600 --script omrom-info <target>  

The omrom-info script will obtain device information, as shown next:

   9600/udp open  OMRON FINS 
   | omron-info: 
   |   Controller Model: CJ2M-CPU32          02.01 
   |   Controller Version: 02.01 
   |   For System Use: 
   |   Program Area Size: 20 
   |   IOM size: 23 
   |   No. DM Words: 32768 
   |   Timer/Counter: 8 
   |   Expansion...