← Back to Labs
Municipal Water & Power Telemetry Security
Step through SCADA Remote Terminal Units (RTUs), cleartext MQTT/Modbus telemetry, remote pump speed tampering, and cellular VPNs
STEP 1 OF 6
1. Municipal SCADA Infrastructure Ingest
Municipal water and power facilities rely on SCADA (Supervisory Control and Data Acquisition) architectures. Sensors measure physical process variables such as tank levels, flow rates, and disinfectant levels. Remote Terminal Units (RTUs) and Programmable Logic Controllers (PLCs) execute control loops and send telemetry to central HMI servers and cloud historians.
Chlorine Dosing
2.1 PPM (Normal)
Pump Speed
1450 RPM
Protocol
Modbus TCP / MQTT
Transport Security
None (Plaintext)
PROTOCOL PAYLOAD & TELEMETRY LOGS
// Periodic Telemetry Poll (Normal Baseline)
Modbus TCP Frame: FC03 Read Holding Registers
Register 0x0400: Tank Level = 76%
Register 0x0401: Chlorine PPM = 2.1 (Safe Threshold: 0.5 - 4.0 PPM)
Register 0x0402: Pump Speed = 1450 RPM
Arrow keys to navigate · R to reset
Tap dots to jump to any step