smod

smod smod는 modbus 프로토콜을 펜테스트하기 위해 필요한 모든 종류의 진단 및 공격 기능을 갖춘 모듈형 프레임워크입니다. Python과 Scapy를 사용한 완전한 Modbus 프로토콜 구현입니다. 이 소프트웨어는 python 2.7.x 환경의 Linux/OSX에서 실행할 수 있습니다. 요약 SCADA공정 제어 네트워크 기반 시스템은 최근 몇 년 동안 독점 폐쇄 네트워크에서 오픈소스 솔루션과 TCP/IP 지원 네트워크로 꾸준히 전환되었습니다. 이로 인해 기존 컴퓨터 네트워크가 직면하는 것과 동일한 보안 취약점에...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – 기능 코드 스푸핑을 통한 읽기 전용 코일에 대한 Modbus TCP 쓰기 프로그램 코드pymodbus 시뮬레이션을 사용한 Python modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import ModbusDeviceIdentification from pymodbus.datastore import...

CVE-2025-41656

CVE-2025-41656 프로젝트 개요 이 프로젝트는 NodeRED의 인증되지 않은 원격 코드 실행 취약점인 CVE-2025-41656 을 모델링하기 위해 만들어졌습니다. 이 취약점을 모델링하기 위해 라즈베리 파이, 액추에이터, 센서로 구성된 소형 SCADA 시스템을 구축했습니다. 라즈베리 파이에는 NodeRED 및 OpenPLC 컨테이너가 포함되어 있으며, 이들은 Modbus TCP를 통해 서로 통신하여 액추에이터를 제어합니다. 이는 CVE-2025-41656 공격을 수행하기 위한 Python 개념 증명 스크립트입니다. 목...

scada-scanner

SCADA 스캐너 및 핑거프린터 개요 네트워크 전반의 산업 제어 시스템을 식별하고 핑거프린팅하기 위한 고성능 비동기 SCADA/ICS 스캐너입니다. 취약점을 탐지하고 공급업체/제품을 식별하며 종합적인 위험 보고서를 생성합니다. 경고: 승인된 보안 평가에만 사용하세요. 무단 스캐닝은 법률 및 규정을 위반할 수 있습니다. 기능 핵심 기능 CIDR 범위 또는 개별 대상에 대한 고속 비동기 스캐닝 주요 산업용 프로토콜 탐지 Modbus, S7, DNP3, BACnet, EtherNet/IP 등 공급업체, 제품, 버전 식별을 포함한 장...

modbus-scanner

Modbus Detection Scanner A multithreaded C scanner for detecting Modbus/TCP services using libmodbus. The scanner does not rely only on TCP port 502 being open. Instead, it establishes a Modbus/TCP connection and sends an application layer Modbus request. A valid Modbus response is used as the...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368

CVE-2026-18368 Explanation: Teltonika Networks RUTOS devices are affected via the modbusgwd component. The vulnerability arises from improper handling of Modbus TCP request data, enabling a remote, unauthenticated attacker with access to the affected service to trigger a heap-based buffer overflo...

CVE-2026-18368 Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368 Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368: Heap-based Buffer Overflow

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

CVE-2026-44107 Exposed Reboot via Modbus

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

EUVD-2026-51042

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-44107

CVE-2026-44107 describes an unauthenticated Denial-of-Service vulnerability in the Modbus TCP interface of the CharxModbusServer. If Modbus functionality is enabled by opening the port, an attacker can trigger a reboot of the charging controller via Modbus TCP without authentication, leading to s...

CVE-2026-44107: Exposed Dangerous Method or Function

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...