SCADAShutdownTool

SCADA Shutdown Tool SCADA Security Testing tool SCADAShutdownTool is an industrial control system automation and testing tool allows security researchers and experts to test SCADA security systems, enumerate slave controllers, read controller's registers values and rewrite registers data...

awesome-connected-things-sec

Awesome Connected Things Security Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://...

recon-skills

Recon Skills A curated pack of security skills for external reconnaissance, web applications, APIs, authentication, vulnerability validation, attack-path analysis, and reporting. These skills are for authorized security testing only. Only test targets you own or have explicit written permission t...

FUXAPWN

CVE-2026-25895 — FUXA = 1.2.9 Unauthenticated Path Traversal to Remote Code Execution Unauthenticated, pre-auth arbitrary file write against FUXA, a Node.js-based SCADA/HMI platform. Chains to remote code execution via several distinct post-write primitives. Works even when secureEnabled = true...

Tekon SCADA Code Execution

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

Tekon SCADA Privilege Escalation

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Enlogic SCADA System ENTek Authentication Hash Use

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

Enlogic SCADA System ENTTEK Code Execution

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

Enlogic SCADA System ENTTEK Data Interception Unauthorized Access

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

Enlogic SCADA System ENTTEK Code Execution

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

Enlogic SCADA System ENTTEK Authentication Bypass

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

Enlogic SCADA Virtual Controller File Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

vulnx

vulnx Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities Quick Start 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring vulnerabilities no API key...

sel4-ics-gateway-demo

seL4 ICS Gateway Demo A defensive security research project comparing protocol-break vs packet-forwarding architectures for protecting industrial control systems from cyber attacks. Documentation: Network Architecture - Network diagrams and traffic flow Container Architecture - Docker container...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

ICS-TestBed-Framework

ICS TestBed Framework A scalable framework for automatically deploying locally or remotely a number of virtual machines that replicate a Supervisory Control And Data Acquisition SCADA network is proposed. This includes multiple virtual hosts emulating sensors and actuators, with a Human Machine...

CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project User XSS PoC This repository contains a benign proof of concept for CVE-2026-36226, a cross-site scripting issue in Advantech WebAccess/SCADA 8.0-2015.08.16. This repository is for authorized security research and local reproduction onl...