#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
sourceincite/randyA pre-authenticated RCE exploit for Inductive Automation Ignition
yakushstanislav/ultravioletSelf-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…
reidmefirst/moxapassSmall script to retrieve passwords from many types of Moxa device, including NPort, OnCell, MGate, etc.
sbaresearch/amlsecAutomated Security Risk Identification Using AutomationML-based Engineering Data
corelight/ripple20A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
momalab/icsfuzzInstrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…
secarmalabs/indushellPoC C&C for the Industroyer malware
finngineering/apxutilA tool to manipulate Schneider Electric PLC archive files
ret2/pwn2own-auto-2024-charxWorking exploit for Phoenix Contact CHARX SEC-3100 using Scapy raw Ethernet packets to trigger vulnerabilities and obtain an interactive connect-back…
geeknik/scada-scannerA high-performance, asynchronous SCADA/ICS scanner
hev0x/cve-2021-26828_scadabr_rceProof-of-concept exploit for CVE-2021-26828 enabling authenticated remote code execution on ScadaBR SCADA systems via JSP file upload. Supports…
emreovunc/myscada-mypro-7-hardcoded-ftp-username-and-passwordCVE-2018-11311 | mySCADA myPRO 7 Hardcoded FTP Username and Password Vulnerability
rodolfomarianocy/unauthenticated-rce-fuxa-cve-2023-33831Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.
9lyph/cve-2022-29593Proof-of-concept exploit for authentication bypass via capture-replay in Dingtian DT-R002 relay, allowing unauthorized control of relays through HTTP…
hunt3r0x/cve-2021-31630-htbproof of Concept (PoC) exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform.
seifallahhomrani1/cve-2023-0861-pocAnalyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers
d0ubl3g/industrial-security-auditing-frameworkISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial (OT) environments.
abhinavagarwal07/scadapack-secure-lock-pocSanitized offline fixture verifier for CVE-2026-81861 in SCADAPack Secure Lock
