Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Network Mapper NMAP を使用した ICS/SCADA ネットワークにおけるアクティブスキャンと情報収集（トルコ語） この研究論文は以前に公開されており、オリジナルの .pdf 版はこちらでも見つけることができます。...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC para CVE-2017-16744 e CVE-2017-16748 Prova de Conceito PoC CVE: 2017-16744 e 2017-16748 Data: 09/09/2019 Autor do Exploit: GainSec - Jon Gaines Homepage do Fornecedor: https://www.tridium.com/ Versão: Afeta as versões do Tridium Niagara AX: 3.8 e anteriores, bem como as versões do Niagara 4:...

on-the-fly

on-the-fly root@kitploit: ▒█████ ███▄ █ ▄▄▄█████▓ ██░ ██ ▓█████ █████ ██▓ ▓██ ██▓ ▒██▒ ██▒ ██ ▀█ █ ▓ ██▒ ▓▒▒▓██░ ██ ▓█ ▀ ▓██ ▓██▒ ▒██ ██▒ ▒██░ ██▒▓██ ▀█ ██▒ ▒ ▓██░ ▒░░▒██▀▀██ ▒███ ▒████ ▒██░ ▒██ ██░ ▒██ ██░▓██▒ ▐▌██▒ ░ ▓██▓ ░ ░▓█ ░██ ▒▓█ ▄ ░▓█▒ ▒██░ ░ ▐██▓░ ░ ████▓▒░▒██░ ▓██░ ▒██▒ ░ ░▓█▒░██▓▒░▒██...

chaps

CHAPS: Script PowerShell per la valutazione dell'indurimento della configurazione CHAPS è un insieme di script di sola lettura per verificare la configurazione di sicurezza dei sistemi Windows quando non è possibile installare software di valutazione aggiuntivo come Microsoft Policy Analyzer o...

isf

Industrielles Exploitation-Framework ISF Industrial Exploitation Framework ist ein auf Python basierendes Exploitation-Framework, ähnlich dem Metasploit-Framework. ISF basiert auf dem Open-Source-Projekt routersploit. Lesen Sie dies in anderen Sprachen:Englisch, Chinesisch vereinfacht,...

Malcolm

Malcolm Malcolm ist eine leistungsstarke Netzwerkverkehrsanalyse-Toolsuite, die mit den folgenden Zielen entwickelt wurde: Einfach zu bedienen – Malcolm akzeptiert Netzwerkverkehrsdaten in Form von vollständigen Paketerfassungsdateien PCAP, Zeek-Protokollen und Suricata-Warnungen. Diese Artefakte...

Kamerka-GUI

Kamerka GUI Kamerka GUI è un dashboard di ricognizione basato su Django per scoprire, esaminare e classificare i sistemi di controllo industriale, i dispositivi dell'Internet delle Cose IoT e i dispositivi medici esposti su Internet. Combina dati di ricerca Shodan, visualizzazione Google Maps,...

vulnx

vulnx Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities Quick Start root@kitploit: 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring...

conpot

Conpot Informazioni Conpot è un honeypot ICS con l'obiettivo di raccogliere informazioni sulle motivazioni e i metodi degli avversari che prendono di mira i sistemi di controllo industriale. Documentazione La documentazione può essere trovata qui. Se stai semplicemente dando un'occhiata a conpot,...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

Rail-OT-Protector

⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

Questo repository non contiene un README...

Purdue-Model-for-Industrial-Control-System-Environments

Purdue-Modell für Industrial Control System ICS-Umgebungen Türkisch Dieses Forschungspapier wurde bereits zuvor veröffentlicht, und Sie können die ursprüngliche .pdf-Version auch hier finden...

ripple20

"Ripple20" Treck-IOT/ICS-Geräteerkennung und Exploit-Erkennung v0.2 Zusammenfassung: Ein Zeek-Paket zur passiven Erkennung von Treck-Geräten, Discovery-/Scanning-Versuchen und der Ausnutzung der 'Ripple20'-Schwachstellen im Treck-TCP/IP-Stack. Referenzen:...

TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution

The device contains a command injection caused by the 'getcommand' query in the application, letting unauthorized attackers execute system commands with root privileges, exploit requires attacker to send crafted requests. id: CVE-2024-9166 info: name: TitanNit Web Control 2.01/Atemio 7600 - Remot...

ics-forensics-tools

ICSpector: Framework di analisi forense ICS di Microsoft Il framework Microsoft ICS Forensics Tools è un framework forense open-source che consente l'analisi dei metadati e dei file di progetto dei PLC industriali. Il framework offre agli investigatori un modo comodo per scansionare i PLC e...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

Rently Smart Home

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...