cset

What is CSET? The Cybersecurity Infrastructure Security Agency CISA and the Idaho National Laboratory INL develop the Cyber Security Evaluation Tool CSET® for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure. Control systems are defined as...

cset

¿Qué es CSET? La Agencia de Seguridad de Infraestructura y Ciberseguridad CISA y el Laboratorio Nacional de Idaho INL desarrollan la Herramienta de Evaluación de Seguridad Cibernética CSET® para los propietarios de activos, con el objetivo principal de reducir el riesgo en la infraestructura...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

ICS-Security-Tools

ICS Security Tools, Tips, and Trade Developed as a community asset This effort intends to pull together tools, tips, and tricks of the trade to working on cyber security in the ICS environment. The code repository will house any specific scripts, tools, configurations, or other useful tidbits to...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

awesome-censys-queries

Awesome Censys Queries Una colección de consultas fascinantes y extravagantes de Censys Search. Contribuciones ¿Encontraste una consulta impresionante? Envíala aquí ¿Interesado en contribuir de otra manera? Consulta las pautas de contribución Recursos Censys Search CensysGPT Beta - Consultas...

awesome-shodan-queries

Impresionantes Consultas de Búsqueda de Shodan Con el tiempo, he recolectado una variedad de consultas de búsqueda interesantes, divertidas y deprimentes para usar en Shodan, el literal motor de búsqueda de internet. Algunas devuelven resultados que provocan vergüenza ajena, mientras que otras...

Redpoint

Redpoint Digital Bond's ICS Enumeration Tools Redpoint is a Digital Bond research project to enumerate ICS applications and devices. We use our Redpoint tools in assessments to discover ICS devices and pull information that would be helpful in secondary testing. A portion of those tools will be...

ICSSecurityScripts

ICSSecurityScripts Industrial Security Scripts Beckhoff-CX9020-WebControl.py: Controlling the Beckhoff CX9020 Windows CE PLC FullBeckhoffScan.py: Elaborate script for scanning AND hacking Beckhoff PLCs PhoenixControlPLC-ILC150.py: Print out CPU status and reverts it, tested and working on ILC150 ...

CVE-2021-44228-Log4j

Test this content before applying it to production systems. Usage Download the latest package from releases here: https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases and then Import the Fixlets, Analyses, and Computer Group into a site and apply computer subscriptions...

bof

BOF BOF Boiboite Opener Framework is a testing framework for field protocols implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and manipulate frames from supported protocols. The library currently provides discovery and extended testing...

conpot

Conpot حول كونبوت هو honeypot لأنظمة ICS بهدف جمع المعلومات الاستخباراتية حول دوافع وأساليب الخصوم الذين يستهدفون أنظمة التحكم الصناعي. التوثيق يمكن العثور على التوثيق هنا. إذا كنت تتصفح كونبوت فقط، نقترح عليك الذهاب إلى التثبيت السريع. إذا كنت ترغب في التعديل وكتابة قالب خاص بك، تغيير المنافذ إل...

OneAlert

OneAlert AI Security OS Ciberdefensa autónoma de código abierto para redes industriales Agentes de IA que detectan, investigan, buscan y responden a amenazas en tu infraestructura OT/ICS — con puertas de aprobación humana y registros de auditoría completos. Demo Setup · Características · Inicio...

Purdue-Model-for-Industrial-Control-System-Environments

Purdue Model for Industrial Control System ICS Environments Turkish This research paper has already been published before and you can also find the original .pdf version at here...

Industrial Security Auditing Framework

Industrial Security Auditing Framework ▄█ ▄████████ ▄████████ ▄████████ ███ ███ ███ ███ ███ ███ ███ ███▌ ███ █▀ ███ ███ ███ █▀ ███▌ ███ ███ ███ ▄███▄▄▄ ███▌ ▀███████████ ▀███████████ ▀▀███▀▀▀ ███ ███ ███ ███ ███ ███ ▄█ ███ ███ ███ ███ █▀ ▄████████▀ ███ █▀ ███ ISAF aims to be a framework that...

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

CVE-2026-13249

CVE-2026-13249 — Honeywell PD45 Unauthenticated File Upload RCE Python 3 PoC for CVE-2026-13249 — Honeywell PD45 Industrial Printer web management interface. Description PoCbit / GitHub CVE-2026-13249 — Firmware F10.19.010040 through before F10.22.030745 exposes an unauthenticated arbitrary file...

CVE-2026-92085

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

SCADAShutdownTool

SCADA Shutdown Tool Herramienta de pruebas de seguridad SCADA SCADAShutdownTool es una herramienta de automatización y prueba para sistemas de control industrial que permite a investigadores y expertos en seguridad probar sistemas de seguridad SCADA, enumerar controladores esclavos, leer los...

CVE-2026-92085

The Talassoft Industrial Management Software by TMT Machinery Industry and Trade Co. Ltd. contains a Stored XSS vulnerability (CWE-79) caused by improper neutralization of input during web page generation. This issue affects versions before V16.0.1 . Attackers could potentially execute malicious ...