#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
spinfosecurity/rail-ot-protectorRail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for…
spinfosecurity/bas-guardianFree BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS…
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
yakushstanislav/ultravioletSelf-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…
judgedbykira/cve-2026-25938-fuxa-unauthenticated-rceAn explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA
0xmhany/cve-2026-9645-scadabr-analysisTechnical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.
mitre-attack/attack-stix-dataSTIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…
qflksheep/cve-2026-67687-ics-park-smart-park-management-system-v2.0ICS-Park Smart Park Management System v2.0
george0papasotiriou/cve-2026-21018-opc-ua-authentication-bypass-via-none-security-policyProof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…
pcrosby-1990/cip-security-pocProof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…
george0papasotiriou/cve-2026-9090-modbus-tcp-write-to-read-only-coils-via-function-code-spoofingPoC Modbus TCP exploit demonstrating spoofed writes to read-only coils in simulated PLCs, highlighting SCADA/ICS access control flaws.
if-forget/cve-2026-52134-libiec61850Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
cisagov/csetCybersecurity Evaluation Tool
aliasrobotics/aztarnaaztarna, a footprinting tool for robots.
bishopfox/sparkplugfuzzerFuzzer for the Sparkplug B IIoT protocol
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
woj-ciech/kamerka-guiUltimate Internet of Things/Industrial Control Systems reconnaissance tool.
hann1bl3l3ct3r/fuxapwnPOC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE
