#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
mrhenrike/embedxpl-forgeEmbedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…
abhinavagarwal07/scadapack-secure-lock-pocSanitized offline fixture verifier for CVE-2026-81861 in SCADAPack Secure Lock
k3ystr0k3r/modbus-scannerMultithreaded Modbus/TCP detection scanner written in C using libmodbus.
xf-secops/cve-2026-32662Advisory detailing active debug code in production Gardyn Home Kit cloud API, exposing development endpoints and embedded credentials, with…
ridpath/terrminus-cve-2026-2406AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive…
mbanyamer/cve-2026-25939-scada-fuxa-unauthenticated-remote-arbitraryProof-of-concept exploit for CVE-2026-25939, an unauthenticated authorization bypass in FUXA SCADA software allowing arbitrary scheduler manipulation…
iti/ics-security-toolsTools, tips, tricks, and more for exploring ICS Security.
0x0mar/smodMODBUS Penetration Testing Framework
digitalbond/redpointNmap NSE scripts for ICS/SCADA discovery and enumeration—BACnet, EtherNet/IP, CoDeSys, Fox, Modicon, Omron, S7—using protocol queries for security…
pmaynard/ics-testbed-frameworkDeploys realistic virtual SCADA/ICS testbeds with IEC 60870-5-104 and OPC-UA nodes, enabling attack simulations, legitimate packet generation, and…
momalab/icsfuzzInstrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…
geeknik/scada-scannerA high-performance, asynchronous SCADA/ICS scanner
hslatman/awesome-industrial-control-system-securityA curated list of resources related to Industrial Control System (ICS) security.
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
mitre-attack/attack-stix-dataSTIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
judgedbykira/cve-2026-25938-fuxa-unauthenticated-rceAn explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA
