#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
exploit-garbage/0day-rubbishRedefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven pressure to…
sourceincite/randyA pre-authenticated RCE exploit for Inductive Automation Ignition
0xmhany/cve-2026-9645-scadabr-analysisTechnical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
ret2/pwn2own-auto-2024-charxWorking exploit for Phoenix Contact CHARX SEC-3100 using Scapy raw Ethernet packets to trigger vulnerabilities and obtain an interactive connect-back…
george0papasotiriou/cve-2026-21018-opc-ua-authentication-bypass-via-none-security-policyProof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…
spinfosecurity/bas-guardianFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS…
spinfosecurity/rail-ot-protectorRail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for…
qflksheep/cve-2026-67687-ics-park-smart-park-management-system-v2.0ICS-Park Smart Park Management System v2.0
george0papasotiriou/cve-2026-9090-modbus-tcp-write-to-read-only-coils-via-function-code-spoofingPoC Modbus TCP exploit demonstrating spoofed writes to read-only coils in simulated PLCs, highlighting SCADA/ICS access control flaws.
pcrosby-1990/cip-security-pocProof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
sadfud/exploitsReal world and CTFs exploiting web/binary POCs.
reidmefirst/moxapassSmall script to retrieve passwords from many types of Moxa device, including NPort, OnCell, MGate, etc.
murataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmapActive Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)
murataydemir/purdue-model-for-industrial-control-system-environmentsPurdue Model for Industrial Control System (ICS) Environments (Turkish)
jensregel/advisoriesThis repository contains a few vulnerabilities that were found and reported during vulnerability assessments.
