
modbus-scanner
Multithreaded Modbus/TCP detection scanner written in C using libmodbus.

Multithreaded Modbus/TCP detection scanner written in C using libmodbus.

A high-performance, asynchronous SCADA/ICS scanner

A collection of fascinating and bizarre Censys Search Queries

Nmap NSE scripts for ICS/SCADA discovery and enumeration—BACnet, EtherNet/IP, CoDeSys, Fox, Modicon, Omron, S7—using protocol queries for security…

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)


CVE-2018-11517 | mySCADA myPRO v7.0.46 has another vulnerability to discover all projects in the system.


Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian

Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

Multi-protocol honeypot simulator supporting 50+ network services with deep interaction, TCP/UDP/ICMP logging, JA3 fingerprinting, and virtual…

Rail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for…

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

IoT and Operational Technology Honeypot


BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.

Free BACnet/BMS vulnerability scanner for building automation systems. Detects CVE-2026-3611 (CVSS 10.0), CVE-2026-24060, and exposed HVAC/BAS…