#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
x3roxismygood/cve-2012-1803Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address…
nullbyte8080/cve-2026-36226Benign proof-of-concept for CVE-2026-36226, a cross-site scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 Admin Dashboard Create…
mbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmservUnauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…
unicorn-hyh/cve-2026-31156There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…
kaleth4/cve-2025-69985PoC exploit for CVE-2025-69985: authentication bypass leading to RCE in FUXA SCADA ≤1.2.8. Includes a modular Python exploit with interactive shell,…
xf-secops/cve-2026-32662Advisory detailing active debug code in production Gardyn Home Kit cloud API, exposing development endpoints and embedded credentials, with…
thiagoralves/openplc_v3OpenPLC Runtime version 3
tijldeneut/icssecurityscriptsPython scripts for security assessment of industrial PLCs: scanning, enumeration, control, and exploitation of Beckhoff, Siemens, Schneider,…
joshuavanderpoll/cve-2025-69985Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…
mbanyamer/cve-2021-41579-lcds-laquis-scada-4.3.1.1085-arbitrary-file-writeProof-of-concept exploit for CVE-2021-41579 enabling arbitrary file write/read and RCE via malicious .els project file in LAquis SCADA ≤4.3.1.1085.
spanwich/sel4-ics-gateway-demoDefensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462
mbanyamer/cve-2026-25939-scada-fuxa-unauthenticated-remote-arbitraryProof-of-concept exploit for CVE-2026-25939, an unauthenticated authorization bypass in FUXA SCADA software allowing arbitrary scheduler manipulation…
ridpath/terrminus-cve-2026-2406AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive…
finngineering/apxutilA tool to manipulate Schneider Electric PLC archive files
ridpath/cve-2021-26828-ultimateScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR
geeknik/scada-scannerA high-performance, asynchronous SCADA/ICS scanner
jensregel/advisoriesThis repository contains a few vulnerabilities that were found and reported during vulnerability assessments.
