#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
rdomanski/exploits_and_advisoriesRepository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.
corelight/ripple20A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
tijldeneut/icssecurityscriptsPython scripts for security assessment of industrial PLCs: scanning, enumeration, control, and exploitation of Beckhoff, Siemens, Schneider,…
if-forget/cve-2026-52134-libiec61850Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
tranquac/openplc_v3To reproduce CVE-2021-31630
bishopfox/sparkplugfuzzerFuzzer for the Sparkplug B IIoT protocol
secarmalabs/indushellPoC C&C for the Industroyer malware
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
ridpath/cve-2021-26828-ultimateScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR
shoucheng3/yamcs__yamcs_cve-2023-45277_5-8-6Java-based mission control framework with YAML configuration, supporting telemetry, commanding, and simulation for spacecraft operations. Includes…
emreovunc/myscada-mypro-7-hardcoded-ftp-username-and-passwordCVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability
emreovunc/myscada-mypro-7-projectid-disclosureCVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.
eyodav/cve-2025-54962Authenticated users can upload arbitrary files (e.g. .html, .svg) as profile images in OpenPLC Runtime. These files are publicly accessible without…
rodolfomarianocy/unauthenticated-rce-fuxa-cve-2023-33831Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.
spanwich/sel4-ics-gateway-demoDefensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462
hann1bl3l3ct3r/fuxapwnPOC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE
nullbyte8080/cve-2026-36226Benign proof-of-concept for CVE-2026-36226, a cross-site scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 Admin Dashboard Create…
unicorn-hyh/cve-2026-31156There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…
