#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
pcrosby-1990/cip-security-pocProof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…
gainsec/cve-2017-16744-and-cve-2017-16748-tridium-niagaraProof of Concept (PoC) for CVE: 2017-16744 and 2017-16748
can/cve-2015-5374-dos-pocDoS exploit for CVE-2015-5374 targeting Siemens SIPROTEC 4 and Compact EN100 Ethernet modules via a crafted UDP packet to port 50000, with an…
emreovunc/myscada-mypro-7-projectid-disclosureCVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.
ridpath/cve-2021-26828-ultimateScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR
k3ystr0k3r/modbus-scannerMultithreaded Modbus/TCP detection scanner written in C using libmodbus.
bishopfox/sparkplugfuzzerFuzzer for the Sparkplug B IIoT protocol
george0papasotiriou/cve-2026-9090-modbus-tcp-write-to-read-only-coils-via-function-code-spoofingPoC Modbus TCP exploit demonstrating spoofed writes to read-only coils in simulated PLCs, highlighting SCADA/ICS access control flaws.
if-forget/cve-2026-52134-libiec61850Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
webraybtl/cve-2022-1068Modbus Slave缓冲区溢出漏洞CVE-2022-1068分析与复现
george0papasotiriou/cve-2026-21018-opc-ua-authentication-bypass-via-none-security-policyProof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…
hev0x/cve-2021-31630-openplc_rceExploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
toxich4/cve-2023-30459CVE-2023-30459
0xmhany/cve-2026-9645-scadabr-analysisTechnical vulnerability analysis and CVE briefing for CVE-2026-9645 affecting ScadaBR.
akbarq/cve-2009-0473-checkSimple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A
murataydemir/purdue-model-for-industrial-control-system-environmentsPurdue Model for Industrial Control System (ICS) Environments (Turkish)
qflksheep/cve-2026-67687-ics-park-smart-park-management-system-v2.0ICS-Park Smart Park Management System v2.0
