SCADAHACKER.COM and ICSCSI.ORG WILL CEASE OPERATION ON DECEMBER 31, 2026. THANK YOU FOR YOUR SUPPORT OVER THE PAST 16 YEARS.
Industrial Control System Security Lab Equipment Sale
It all began in 2010 when I acquired my first ICS security appliance - the "OG" in OT security ... a Hirschmann EAGLE mGuard. That device traveled the world with me when I developed an eye-opening demonstration of how to attack a SCADA system live! From Toronto to Bogota, Kuwait to Singapore (in both directions) ... attendees saw how critical systems can be compromised. It has since been upgraded to current firmware and actually runs better than its original 2007 version. This is a testimonial of how important life-cycle support is to OT architectures. The lab has evolved significantly over the past 16 years to represent one of the most extensive labs for ICS defensive security research, design, and application. What is of additional value is the fact that most of the controllers and appliances are configured for interoperability. This allows you to mix and match components with little or no modification to the configuration. For example, all controllers that communication via Modbus/TCP have the same program running against the same Registers. Operational graphics on human-machine interfaces look identical irrespective of the SCADA software.
The list below represents the lab components that are currently for purchase. At this time, the entire lab is for sale as a single lot ... piecemeal purchases are not accepted at this time. ICSCSI will also offer hands-on in-person training for the equipment (for an additional charge passed on location and duration). Please direct any questions including requests for pricing and/or an PDF document to sales@icscsi.org.
Date Last Updated: May 20, 2026 (updated Emerson/GE Fanuc Engineering Software)
| MANUFACTURER | DEVICE TYPE | PRODUCT NAME | MODEL/PART NUMBER | HARDWARE VERSION |
FIRMWARE (BOOT) VERSION |
SOFTWARE VERSION |
SERIAL NUMBER | CONDITION | ACCESS METHOD |
WEB ACCESS |
SOFTWARE REQUIRED (SUBJECT TO CHANGE) |
DOCUMENTS PROVIDED (SUBJECT TO CHANGE) |
| WAGO | Compact PLC |
Controller ETHERNET 125VAC RO End Module |
750-842 750-514 750-600 |
1st Generation |
05.00.01(17) |
2807171006-B060615 |
Brand New | App/Web | http | CODESYS | User Manual | |
| Siemens | Compact PLC | SIMATIC S7-1211C | 6ES7 211-1BE31-0XB0 | 1.0 | V 03.00.01 | SZVC7YE7000556 | Brand New | App/Web/SNMP | http | TIA Portal V12 | System Manual | |
| Siemens | Compact PLC | SIMATIC S7-1211C | 6ES7 211-1BE31-0XB0 | 1.0 | V 03.00.01 | SZVC7YE7000524 | Brand New | App/Web/SNMP | http | TIA Portal V12 | System Manual | |
| Siemens | Compact PLC | SIMATIC S7-1200 | 6ES7 211-1BD30-0XB0 | 1.0 | V 02.02.00 | SZVA6YU9001597 | Brand New | App/Web/SNMP | http | TIA Portal V12 | System Manual | |
| Rockwell Automation/AB | Compact PLC | Micro 830 | 2080-LC30-16AWB | SS1EQ96I | Brand New | App | Connected Components Workbench | User Manual | ||||
| Rockwell Automation/AB | Compact PLC | Micro 850 | 2080-LC50-24QWB | 23268084 | Brand New | App | Connected Components Workbench | User Manual | ||||
| Rockwell Automation/AB | Compact PLC | MicroLogix 1200 | ML1210 | 2L24AWAR | Like New | App | RSLinx | User Manual | ||||
| Rockwell Automation/AB | Compact PLC | MicroLogix 1400 | 1766-L32BWA | Series B FRN 11.0 | 6L32BWA | Like New | App/Web | http | RSLinx | User Manual | ||
| Automation Direct | Compact PLC |
Productivity 1000 CPU Productivity 1000 DI/DO Productivity 1000 Relay Out Productivity 1000 Simulator |
P1-540 P1-16TR P1-15CDD1 P1-08SIM |
A A1 A3 A3 |
0x0102 001.002.005.036 |
18301F0088A 2618FA1 3917FA3 5117FA3 |
Brand New | App/Web | http/https | Productivity Suite | User Manual | |
| Siemens | PLC |
SIMATIC S7-1513-1 CPU SIMATIC S7-1513-1 DI32 SIMATIC S7-1513-1 DQ16 SIMATIC S7-1500 60W PS |
6ES7 513-1AL00-0AB0 GES7 522-1BH00-0AB0 GES7 521-1BL00-0AB0 GES7 507-ORA00-0AB0 |
2.0 2.0 2.0 |
V
01.05.00 |
C-D3SD30372013 |
Brand New | App/Web/SNMP | http/https | TIA Portal V13 |
Getting Started System Manual |
|
| Emerson / GE Fanuc | PLC |
RX3i CPE305 RX3i Ethernet Module Input Simulator Module RX3i Universal AI RX3i 8 Channel AO Output Relay Form A 16PT CPU Energy Pack PSA140 RX3i Serial Bus Transmitter |
IC695CPE305-ABAL IC695ETM001-ER IC694ACC300A IC695ALG600-DD IC695ALG708-CB IC694MDL940D IC695ACC400-AA IC695PSA040 IC695LRE001C |
l826480 L853665 L850444 A366913 A385462 L859594 L826246 - L850379 |
Like New | FTP | PAC Machine Edition (Proficy Machine Edition) | |||||
| Emerson / GE Fanuc | PLC |
Series 90-30 CPU 364 High Capacity Power Supply 10-Slot Chassis |
IC693CPU364-CJ IC693PWR330G IC693CHS391M |
8682332 A022920 - |
Like New | PAC Machine Edition (Proficy
Machine Edition) (VersaPro / Logic Master 90) |
||||||
| Rockwell Automation/AB | PLC |
PLC-5/20E ENET PROC MOD 10-60VDC DO 10-30VDC HI TRUE DI Contact Output 120VAC DI 10-30VDC DI Contact Output 120VAC DO 120VAC Power Supply DH+/RS232 Interface |
1785-20E 1771-0BD 1771-IBN 1771-0ZC 1771-IAD 1771-IBD 1771-0ZC 1771-0A 1771-P45 1785-KE C |
D - - B - - B - - B05 |
ST0XD8DD SD00M3HP - - CDN8815 - - - CND9045 SD1UM3WY |
Legacy | RSLogix | User Manual | ||||
| Lantronix | Ethernet Bridge | Modbus Bridge | UDS1100-IAP | 1.4.0.2 | Like New | Web/SNMP | http/https | User Guide | ||||
| Midwatch (Lantronix) | Ethernet Bridge | Multi-Master DF1 Bridge | UDS1100-IAP (STE-1) | Like New | Web/SNMP | http/https | User Guide | |||||
| Belden/GarrettCom | Industrial Router/Bridge | Magnum DX40 | DX40-03-HP | V3.0.3 (RC1) | 1052 0286 | Brand New | Web | http | Installation Guide | |||
| Belden/Hirschmann | Industrial Firewall | EAGLE 20 | EAGLE 20 TX/TX | 1.13 | SDV-05.3.00 | 943987001010908388 | Brand New | Web/SSH | https | Java Runtime | User Manual | |
| Belden/Hirschmann | Industrial Firewall | EAGLE mGuard | "The OG" | 3.3.1.default | 8.1.6.default | 943011311010201374 | Used | Web | https | Upgraded Firmware !!! | User Manual | |
| Siemens | Industrial Firewall | SCALANCE S612 | 6GK5612-0BA10-2AA3 | V 1.5.0 | Used | Web | https | Security Configuration Manager |
Hardware Installation Manual Operating Instructions |
|||
| Belden/Hirschmann | Industrial Firewall | EAGLE One | EAGLEONE-0200T1T1 | 0104 | ONE-05.3.00 | EAGLEONE ONE-05.3.00 | 942103999000001087 | Like New | Web | https | Java Runtime | ? |
| Phoenix Contact | Industrial Firewall | FL MGUARD | RS4000 TX/TX VPN | 00003100 | 3.3.2 | 2032665609 | Brand New | Web | https | Installation and Startup Manual | ||
| Phoenix Contact | Industrial Firewall | FL MGUARD | FL MGUARD GT/GT | 00001020 | 3.3.0 | 1121285195 | Brand New | Web | https | Installation and Startup Manual | ||
| Belden/Hirschmann/Tofino | Industrial Firewall DPI | Tofino Argon 220 | Tofino22-0200T1T1EDDZ9000ZTAE02.2.00 | BSI TSA-220 TX/TX | 02.2.00 | 943987506010301419 | Slightly Used | App | Tofino Configurator |
Hardware Installation Manual Tofino Configurator User Manual Data Sheet |
||
| Belden/Hirschmann/Tofino | Industrial Firewall DPI | EAGLE 20 Tofino | Tofino22-0200T1T1EDDZ9000ZTAE02.1.00 | BSI TSA-220 TX/TX | 02.2.00 | 943987002000001005 | Slightly Used | App | Tofino Configurator |
Hardware Installation Manual Tofino Configurator User Manual Data Sheet |
||
| Belden/Hirschmann/Tofino | Industrial Firewall DPI | EAGLE 20 Tofino | Eagle220-0200T1T1EDDZ9000ZTAE02.2.00 | Hirschmann Eagle 20 Tofino TX/TX | 02.2.00 | 943987501010501395 | Slightly Used | App | Tofino Configurator |
Hardware Installation Manual Tofino Configurator User Manual Data Sheet |
||
| Belden/Hirschmann/Tofino | Industrial Firewall DPI | Tofino Xenon | TOFINOXE-0200T1T1SDDZ9000ZTAT02.0.01 | Tofino Xenon TX/TX | 02.2.00 | 942103999020201268 | Slightly Used | App | Tofino Configurator |
Hardware Installation Manual Tofino Configurator User Manual Data Sheet |
||
| Certes Networks | P2P Encrypter | CEP 10 | CEP10 VSE | 1.3.56 | CEP2.3.4 | 10101105 | Brand New | App/SSH | https |
Data Sheet FIPS Security Policy |
||
| Certes Networks | P2P Encrypter | CEP 10 | CEP10 VSE | 1.3.56 | CEP2.3.4 | 10101106 | Brand New | App/SSH | https |
Data Sheet FIPS Security Policy |
||
| Certes Networks | P2P Encrypter | CEP 5 | CEP5 LC | CEP2.3.4 | 130000277 | Brand New | App/SSH | https | ||||
| Certes Networks | P2P Encrypter | CEP 5 | CEP5 LC | CEP2.3.4 | 130000265 | Brand New | App/SSH | https | ||||
| Belden/Hirschmann | Industrial Switch (IP67) | OCTOPUS-OS20 | OS20-001200T5T5T5-TBBY999HHSE3S | 0104 |
HiOS-3S-06.0.03 2016-11-15 22:07 (RAM) HiOS-06.0.03 2016-11-15 22:07 (FLASH) |
942133999072904335 | Brand New | Web/SSH | https | Java Runtime | Installation Manual | |
| Belden/Hirschmann | Industrial Switch (IP67) | OCTOPUS-8M | OCTOPUS 8M | 1.30/5/0104 | L2P-08.0.01 | L2P-08.0.01-FINAL | 943931001052101866 | Brand New | Web/SSH | https | Java Runtime | Installation Manual |
| Red Lion Controls | Industrial Switch | SLX-16MS | SLX-16MS | 5.0.196 | 1057981 | Like New | Web/SSH/SMTP | https |
Hardware Manual Software Manual |
|||
| Belden/Hirschmann | Industrial Switch | ETHERNET Railswitch | RS30 | 0xd0 | L2P-05.0.02 | L2P-08.0.06 | 943434032193302970 | Brand New | Web | https | Java Runtime | Installation Manual |
| Belden/Hirschmann | Industrial Switch | ETHERNET Railswitch | RS20 | 0xd1 | L2P-05.0.02 | L2P-08.0.06 | 943434022204602166 | Brand New | Web | https | Java Runtime | Installation Manual |
| Siemens | Industrial Switch | SCALANCE X208 | 6GK5 208-0BA00-2AA3 | 3 | V1.11.0 | VPTO051160 | Used | Web/SNMP | http |
Operating Instructions Configuration Manual |
||
| Rockwell Automation/AB | Industrial Switch | Stratix 6000 | 1783-EMS08T | 0.53w110803 | 0.31w110803 | D00E2CEA | Used | Web/SNMP | http |
User Manual Installation Instructions |
||
| Siemens/RuggedCom | Industrial Switch | RS900 | RS900-24-N-L5-L5-00 | V2. 40-00-0066 | 2.20.0 | 3.12.2 | 900-1109-23384 | Brand New | Web/SSH | https | Installation Manual | |
| Cisco Systems | Ethernet Switch | WS-C3560-8PC | WS-C3560-8PC-S | V04 |
Version 12.2(35r)SE2 (C3560-HBOOT-M) |
Version 15.0(2)SE8 (C3560-IPSERVICESK9-M) |
FOC1502W2YF | Used | Web/SSH/SMTP | https | Configuration Guide | |
| Phoenix Contact | Power Supply | Quint Power | QUINT-PS-100-240AC | 06 | D0014106 0417 030415 | Brand New | ||||||
| Omron | Power Supply | S8VK-G24024 | 02115M | Brand New | ||||||||
|
Belden/Hirschmann/Tofino WAGO WAGO WAGO WAGO |
Industrial Firewall DPI Compact PLC CTRL Compact PLC I/O Compact PLC I/O Compact PLC End Piece |
Tofino Demonstration Panel TSA-100 750-841 Controller 750-400 DI 24V 750-1500 DO 24V 750-600 End Module |
Tofino10-0200T1T1EDDZ9000ZTAE02.2.00 |
BSI TSA-100 |
AF00355300006 |
- 2410171002-030315 1008-06-03 3910-01-04 3303-01-00 |
Slightly Used | App |
Tofino Configurator CODESYS - - - |
|||
| Planet | Power Supply | Gigibit HiPwr over Enet Splitter | IPOE-162S | V2 | AF00355300006 | New in Box | ||||||
| Planet | Power Supply | Gigibit HiPwr over Enet Splitter | IPOE-162S | V2 | AF00355A00256 | New in Box | ||||||
| Installation H/W | 19” 1U Rack Mount Stand w Casters | New in Box | ||||||||||
| Installation H/W | 19” 1U Rack Mount Stand w Casters | Slightly Used | ||||||||||
| Installation H/W | 19” 1U Rack Mount Stand w Casters | Slightly Used | ||||||||||
| CONDITIONS: | ||||||||||||
| BRAND NEW | Product was purchased new and never installed outside of the ICSCSI lab | |||||||||||
| LIKE NEW | Product was purchased “used” and is in working condition and in excellent physical condition with no physical or internal flaws | |||||||||||
| SLIGHTLY USED | Product was purchased “used” and is in working condition showing some signs of use and/or installation in working environments | |||||||||||
| USED | Product was purchased “used” and is in working condition showing obvious signs of use and installation in working environments | |||||||||||
| LEGACY | Product is in working condition and is more than 30 years old with signs of use/installation in a physical industrial environment | |||||||||||
| SOFTWARE: | ||||||||||||
| Software will be provided int he form of a VMware Virtual Machine | ||||||||||||
| Software is NOT current and is based on the version at the time of device acquisition | ||||||||||||
Date Last Updated: May 20, 2026 (updated Emerson/GE Fanuc Engineering Software)
All equipment is sold "as is" and may require application, library
and/or driver updates that are at the buyer's expense.