Labshock: Run ICS/OT Security Labs on macOS with Docker

Zakhar Bernhardt’s Labshock enables macOS users (even those with M1/M2/M3 chips and 8GB RAM) to run ICS/OT security labs locally—without VMs, cloud, or lag. The setup requires Docker + Git and takes 5 minutes.

What You Get

• PLC simulation
• SCADA panel
• Attack tools
• Network traffic analysis

Installation Steps

1. Install Docker Desktop for macOS (ARM version for M1/M2/M3):

   brew install --cask docker 
   

2. Clone Labshock repository:

git clone https://github.com/zakhar-bernhardt/labshock.git 

3. Navigate to the Labshock directory:

cd labshock 

4. Run the setup script:

./install.sh 

You Should Know

• Docker Commands for Labshock Management:
• Start Labshock:

  docker-compose up -d 
  

• Stop Labshock:

  docker-compose down 
  

• Check running containers:

  docker ps 
  

• Network Traffic Analysis with Wireshark:

  sudo tshark -i docker0 -Y "modbus" 
  

• PLC Simulation Access:

  curl http://localhost:502 
  

• SCADA Panel Login:
  Open `http://localhost:8080` in a browser.

What Undercode Say

Labshock bridges the gap for macOS users in ICS/OT security training. Unlike cloud-based labs, it runs locally, reducing latency and dependency on internet connectivity. Key takeaways:
– No virtualization overhead (unlike VirtualBox/VMware).
– Lightweight (optimized for ARM Macs).
– Real-world attack simulation (Modbus, SCADA exploits).

For deeper ICS/OT security testing, explore:

• Metasploit Modbus Modules:

  use auxiliary/scanner/scada/modbusdetect 
  

• PLCScan for Device Enumeration:

  python3 plcscan.py -i docker0 
  

Expected Output

After running Labshock, expect:

• A local SCADA dashboard (`http://localhost:8080`).
• Simulated PLC responses on port 502.
• Pre-configured attack tools (e.g., Metasploit, Nmap).

https://youtube.com/T_jPpCzoEvU

Prediction

As ICS/OT attacks rise, tools like Labshock will become essential for offensive security training. Future updates may include AI-driven attack simulations and industrial protocol fuzzing.

IT/Security Reporter URL:

Reported By: Zakharb Youre – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram