dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

ics-phishing-toolkit

ics-phishing-toolkit This toolkit for remediating malicious calendar invites is designed to help teams using email security solutions that don't natively remediate these attacks. If you're using Sublime, you don't need this toolkit because remediation is natively supported. Supported stacks...

OneAlert

OneAlert AI Security OS Open-source autonomous cyber defense for industrial networks AI agents that detect, investigate, hunt, and respond to threats across your OT/ICS infrastructure — with human approval gates and full audit trails. Demo Setup · Features · Quick Start · Architecture Try It Now...

TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution

The device contains a command injection caused by the 'getcommand' query in the application, letting unauthorized attackers execute system commands with root privileges, exploit requires attacker to send crafted requests. id: CVE-2024-9166 info: name: TitanNit Web Control 2.01/Atemio 7600 - Remot...

conpot

Conpot Acerca de Conpot es un honeypot de ICS con el objetivo de recopilar inteligencia sobre los motivos y métodos de los adversarios que atacan sistemas de control industrial. Documentación La documentación se puede encontrar aquí. Si solo está probando conpot, le sugerimos que vaya a instalaci...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

Purdue-Model-for-Industrial-Control-System-Environments

Purdue Model for Industrial Control System ICS Environments Turkish This research paper has already been published before and you can also find the original .pdf version at here...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

This repository does not have a README...

Malcolm

Malcolm Malcolm es un potente conjunto de herramientas de análisis de tráfico de red diseñado con los siguientes objetivos: Fácil de usar – Malcolm acepta datos de tráfico de red en forma de capturas completas de paquetes PCAP, registros de Zeek y alertas de Suricata. Estos artefactos se pueden...

chaps

CHAPS: Scripts de PowerShell para Evaluación de Endurecimiento de Configuración CHAPS es un conjunto de scripts de solo lectura para verificar la configuración de seguridad del sistema Windows donde no se puede instalar software de evaluación adicional como Microsoft Policy Analyzer o herramienta...

attack-stix-data

ATT&CK® STIX 数据 MITRE ATT&CK 是一个全球可访问的知识库，收录了基于真实世界观察得出的对手战术和技术。 ATT&CK 知识库被用作私营部门、政府以及网络安全产品和服务社区中开发特定威胁模型和方法论的基础。 本仓库包含以 STIX 2.1 JSON 集合形式表示的 MITRE ATT&CK 数据集。 如果您正在寻找表示 ATT&CK 的 STIX 2.0 JSON，请参阅我们的 MITRE/CTI GitHub 仓库， 其中包含相同的数据集，但使用 STIX 2.0，并且不提供本仓库所提供的集合功能。 仓库结构 root@kitploit: . ├─...

ripple20

"Ripple20" Treck IOT/ICS 设备发现与漏洞利用检测 v0.2 Summary: 一个用于被动检测 Treck 设备、发现/扫描尝试以及针对 Treck TCP/IP 协议栈中 "Ripple20" 系列漏洞的利用行为的 Zeek 包。 References: https://corelight.blog/2020/06/30/ripple20-zeek-package-open-sourced/ https://www.jsof-tech.com/ripple20/ 由 JSOF 提供的 python/scapy 扫描包。...

CVE-2026-81855

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:52+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02 2026-09-16 04:08:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvmbcamq7o2f 2026-09-16 08:10:07+00:00| seen|...

CVE-2026-78225

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:50+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02 2026-09-16 04:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvmbbxn7xj24 2026-09-16 08:10:04+00:00| seen|...

CVE-2026-82567

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03 2026-09-15 20:04:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlgavpft22p...

CVE-2026-73807

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03 2026-09-15 20:04:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlgavpft22p 2026-09-16 00:00:39+00:00| seen|...

CVE-2026-66372

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01...

CVE-2026-66887

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:37+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01 2026-09-15 20:02:34+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o 2026-09-16 07:40:06+00:00| seen|...