#1Tools for assessing and securing Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
Kitploit recommended
joshuavanderpoll/cve-2025-69985Python exploit for CVE-2025-69985 targeting FUXA SCADA software. Sends crafted JSON payload to /api/runscript endpoint to bypass authentication and…
hann1bl3l3ct3r/fuxapwnPOC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE
judgedbykira/cve-2026-25938-fuxa-unauthenticated-rceAn explanation and PoC to exploit CVE-2026-25938 Unauthenticated RCE Vulnerability on FUXA
murataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmapActive Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)
0xicf/panelshockSchneider Electric Magelis HMI Resource Consumption Vulnerabilities [ICSA-16-308-02, CVE-2016-8367, CVE-2016-8374]
shipcod3/cve-2025-48466Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control
ridpath/terrminus-cve-2026-2406AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive…
wallyschag/cve-2025-41656This repository includes the code and files needed to test and execute a PoC for CVE-2025-41656
kaleth4/cve-2025-69985PoC exploit for CVE-2025-69985: authentication bypass leading to RCE in FUXA SCADA ≤1.2.8. Includes a modular Python exploit with interactive shell,…
mbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmservUnauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…
x3roxismygood/cve-2012-1803Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address…
unicorn-hyh/cve-2026-31156There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…
nullbyte8080/cve-2026-36226Benign proof-of-concept for CVE-2026-36226, a cross-site scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 Admin Dashboard Create…
xf-secops/cve-2026-32662Advisory detailing active debug code in production Gardyn Home Kit cloud API, exposing development endpoints and embedded credentials, with…
yanissec/cve-2018-7849CVE-2018-7849
yanissec/cve-2018-7845CVE-2018-7845
astrowmist/poc-cve-2012-1831Proof Of Concept for the CVE-2012-1831 (Kingview Touchview 6.53). This is a Industrial Control Systems Vulnerability
