chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

conpot

Conpot Acerca de Conpot es un honeypot de ICS con el objetivo de recopilar inteligencia sobre los motivos y métodos de los adversarios que atacan sistemas de control industrial. Documentación La documentación se puede encontrar aquí. Si solo está probando conpot, le sugerimos que vaya a instalaci...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

OneAlert

OneAlert AI Security OS Ciberdefensa autónoma de código abierto para redes industriales Agentes de IA que detectan, investigan, buscan y responden a amenazas en tu infraestructura OT/ICS — con puertas de aprobación humana y registros de auditoría completos. Demo Setup · Características · Inicio...

scada-scanner

SCADA Scanner and Fingerprinter Overview A high-performance, asynchronous SCADA/ICS scanner for identifying and fingerprinting industrial control systems across networks. Detects vulnerabilities, identifies vendors/products, and generates comprehensive risk reports. WARNING: For authorized securi...

Purdue-Model-for-Industrial-Control-System-Environments

Purdue Model for Industrial Control System ICS Environments Turkish This research paper has already been published before and you can also find the original .pdf version at here...

Kamerka-GUI

Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...

Malcolm

Malcolm Malcolm es un potente conjunto de herramientas de análisis de tráfico de red diseñado con los siguientes objetivos: Fácil de usar – Malcolm acepta datos de tráfico de red en forma de capturas completas de paquetes PCAP, registros de Zeek y alertas de Suricata. Estos artefactos se pueden...

ics-phishing-toolkit

ics-phishing-toolkit Este conjunto de herramientas para remediar invitaciones de calendario maliciosas está diseñado para ayudar a equipos que utilizan soluciones de seguridad de correo electrónico que no eliminan nativamente estos ataques. Si usas Sublime, no necesitas este kit porque la...

chaps

CHAPS: Scripts de PowerShell para Evaluación de Endurecimiento de Configuración CHAPS es un conjunto de scripts de solo lectura para verificar la configuración de seguridad del sistema Windows donde no se puede instalar software de evaluación adicional como Microsoft Policy Analyzer o herramienta...

on-the-fly

on-the-fly root@kitploit: ▒█████ ███▄ █ ▄▄▄█████▓ ██░ ██ ▓█████ █████ ██▓ ▓██ ██▓ ▒██▒ ██▒ ██ ▀█ █ ▓ ██▒ ▓▒▒▓██░ ██ ▓█ ▀ ▓██ ▓██▒ ▒██ ██▒ ▒██░ ██▒▓██ ▀█ ██▒ ▒ ▓██░ ▒░░▒██▀▀██ ▒███ ▒████ ▒██░ ▒██ ██░ ▒██ ██░▓██▒ ▐▌██▒ ░ ▓██▓ ░ ░▓█ ░██ ▒▓█ ▄ ░▓█▒ ▒██░ ░ ▐██▓░ ░ ████▓▒░▒██░ ▓██░ ▒██▒ ░ ░▓█▒░██▓▒░▒██...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Escaneo activo y recopilación de información en redes ICS/SCADA utilizando Network Mapper NMAP Turco Este artículo de investigación ya ha sido publicado anteriormente y también puedes encontrar la versión .pdf original en aquí...

awesome-industrial-control-system-security

awesome-industrial-control-system-security 산업 제어 시스템ICS 보안과 관련된 리소스를 선별한 목록입니다. 자유롭게 기여하세요. 도구...

attack-stix-data

ATT&CK® STIX 데이터 MITRE ATT&CK는 실제 관찰에 기반한 공격자 전술과 기법에 대해 전 세계적으로 접근 가능한 지식 기반입니다. ATT&CK 지식 기반은 민간 부문, 정부, 그리고 사이버 보안 제품 및 서비스 커뮤니티에서 특정 위협 모델과 방법론을 개발하기 위한 기반으로 사용됩니다. 이 저장소는 STIX 2.1 JSON 컬렉션으로 표현된 MITRE ATT&CK 데이터셋을 포함합니다. ATT&CK를 나타내는 STIX 2.0 JSON을 찾고 있다면, 동일한 데이터셋을 STIX 2.0으로 포함하고 이 저장소에서...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

ics-forensics-tools

ICSpector: Framework de Análisis Forense ICS de Microsoft El framework Microsoft ICS Forensics Tools es un framework forense de código abierto que permite el análisis de metadatos y archivos de proyecto de PLC industriales. El framework proporciona a los investigadores una forma conveniente de...

dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution

The device contains a command injection caused by the 'getcommand' query in the application, letting unauthorized attackers execute system commands with root privileges, exploit requires attacker to send crafted requests. id: CVE-2024-9166 info: name: TitanNit Web Control 2.01/Atemio 7600 - Remot...