ICSCracker 2.0.3: the whole install goes offline
The appliance now installs from a single bootable ISO, ships with the vulnerability database baked in, and brings up all four NICs on first boot. Nothing in the install needs an internet connection.
ICSCracker 2.0.3 moves the entire install offline.
One bootable ISO. Previously the OS went on first and the components were deployed afterwards. Now it is a single bootable ISO: bring the hardware to site, install, no connectivity required at any point.
The vulnerability database ships inside the image. Grype’s database (~1.7GB) is baked in, so SBOM scanning works the moment the install finishes — no fetching match data first. That is a requirement, not a nicety: the OT segment under test is not supposed to have a route out.
All four NICs configured on first boot. Two DHCP, two static, up and addressed without attaching a monitor to configure networking.
Working offline has always been a premise of this machine rather than an option — it is built to sit on a segment physically separated from MES, ERP and the internet.