#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
thehappydinoa/awesome-censys-queriesA collection of fascinating and bizarre Censys Search Queries
secarmalabs/indushellPoC C&C for the Industroyer malware
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
murataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmapActive Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)
0x0mar/smodMODBUS Penetration Testing Framework
iti/ics-security-toolsTools, tips, tricks, and more for exploring ICS Security.
bishopfox/sparkplugfuzzerFuzzer for the Sparkplug B IIoT protocol
mateustesser/cve-2023-31717Proof-of-concept SQL injection exploit for FUXA SCADA software (<=1.1.12) via HTTP POST JSON id parameter, enabling extraction of SQLite database…
x3roxismygood/cve-2012-1803Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address…
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
cisagov/malcolmContainerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…
mitre-attack/attack-stix-dataSTIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…
pmaynard/ics-testbed-frameworkDeploys realistic virtual SCADA/ICS testbeds with IEC 60870-5-104 and OPC-UA nodes, enabling attack simulations, legitimate packet generation, and…
praetorian-inc/nervaFast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
emreovunc/myscada-mypro-7-projectid-disclosureCVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.
momalab/icsfuzzInstrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…
joshuavanderpoll/cve-2025-69985Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…
woj-ciech/kamerka-guiUltimate Internet of Things/Industrial Control Systems reconnaissance tool.
