fuzzowski

Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during the whole proces...

CVE-2025-48466

CVE-2025-48466 Injection de paquets Modbus sur Advantech WISE 4060LAN / Passerelle IoT pour le contrôle de porte. voir script : main.py Résumé J'ai pu découvrir qu'il est très facile de manipuler d'une manière ou d'une autre le serveur Modbus exécuté sur une passerelle IoT pour le contrôle de por...

smod

smod smod — это модульный фреймворк, содержащий все виды диагностических и атакующих функций, которые могут понадобиться для пентеста протокола modbus. Это полноценная реализация протокола Modbus с использованием Python и Scapy. Данное ПО может запускаться на Linux/OSX под python 2.7.x. Резюме...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – 기능 코드 스푸핑을 통한 읽기 전용 코일에 대한 Modbus TCP 쓰기 프로그램 코드pymodbus 시뮬레이션을 사용한 Python modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import ModbusDeviceIdentification from pymodbus.datastore import...

CVE-2022-1068

CVE-2022-1068 Analyse et reproduction de la vulnérabilité de débordement de tampon Modbus Slave CVE-2022-1068 Référence d'utilisation : https://mp.weixin.qq.com/s/5InTTej26aDFzQgB8l6MHw Avertissement : Cet article est uniquement destiné à l'échange technique, à l'apprentissage et à la recherche. ...

CVE-2025-41656

CVE-2025-41656 Résumé du projet Ce projet existe pour modéliser CVE-2025-41656 , une vulnérabilité d'exécution de code à distance non authentifiée pour NodeRED. Pour modéliser cette vulnérabilité, nous avons créé un système SCADA de petit format avec un Raspberry Pi, un actionneur et un capteur. ...

scada-scanner

SCADA-сканер и фингерпринтер Обзор Высокопроизводительный асинхронный сканер SCADA/ICS для обнаружения и фингерпринтинга промышленных систем управления в сетях. Выявляет уязвимости, определяет вендоров/продукты и формирует подробные отчеты о рисках. ВНИМАНИЕ: Только для авторизованных оценок...

modbus-scanner

Modbus Detection Scanner A multithreaded C scanner for detecting Modbus/TCP services using libmodbus. The scanner does not rely only on TCP port 502 being open. Instead, it establishes a Modbus/TCP connection and sends an application layer Modbus request. A valid Modbus response is used as the...

CVE-2026-73170

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a...

CVE-2026-73169

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...

CVE-2026-73170

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a...

CVE-2026-73170

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a...

CVE-2026-73170

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the Modbus CSV import workflow of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can craft a malicious imported file to achieve arbitrary Lua code execution ...

EUVD-2026-80730

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the Modbus CSV import workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary Lua code on the device via a...

CVE-2026-73169

Nozomi Networks Labs identified a stored Cross-Site Scripting (CWE-79) vulnerability in the Modbus transaction management interface of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can inject malicious script content that later e...

EUVD-2026-80731

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...

CVE-2026-73169

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...

CVE-2026-73169

Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...