#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
praetorian-inc/nervaFast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
mrhenrike/embedxpl-forgeEmbedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs,…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
exploit-garbage/0day-rubbishRedefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven pressure to…
jtpereyda/boofuzzA fork and successor of the Sulley Fuzzing Framework
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
abhinavagarwal07/scadapack-secure-lock-pocSanitized offline fixture verifier for CVE-2026-81861 in SCADAPack Secure Lock
k3ystr0k3r/modbus-scannerMultithreaded Modbus/TCP detection scanner written in C using libmodbus.
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
cisagov/malcolmContainerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…
