ICSSecurityScripts

ICSSecurityScripts 산업 보안 스크립트 Beckhoff-CX9020-WebControl.py: Beckhoff CX9020 Windows CE PLC 제어 FullBeckhoffScan.py: Beckhoff PLC를 스캔하고 해킹하기 위한 정교한 스크립트 PhoenixControlPLC-ILC150.py: CPU 상태를 출력하고 이를 되돌립니다. ILC150에서 테스트 및 작동 확인됨 다른 기기에서는 최소한 부분적으로 작동 PhoenixControlPLC-ILC390.py: CPU 상태를 출력하고 이를 되돌립니...

CVE-2018-7843

CVE-2018-7843 영향받는 제품 Schneider Electric Modicon M580 버전 2.80 Schneider Electric Modicon M340 버전 3.10 Schneider Electric Modicon Premium 버전 3.20 Schneider Electric Modicon Quantum 버전 3.60 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework — это фреймворк криминалистики с открытым исходным кодом, позволяющий анализировать метаданные промышленных ПЛК и файлы проектов. Фреймворк предоставляет следователям удобный способ сканирования ПЛК и выявления...

apxutil

Инструмент для работы с архивными файлами ПЛК Schneider Electric Данный инструмент может извлекать и собирать заново архивные файлы ПЛК, используемые несколькими ПЛК Schneider Electric, включая как минимум M580, M340 и Quantum. Архивные файлы с расширением .sta на самом деле являются zip-архивами...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

CVE-2023-1698

wagoexploit.py - PoC-эксплойт для CVE-2023-1698 🚀 О программе wagoexploit.py — это эксплойт для проверки концепции PoC для CVE-2023-1698 , критической уязвимости, затрагивающей ПЛК WAGO. Этот эксплойт предоставляет злоумышленнику доступ к оболочке устройства, потенциально раскрывая конфиденциальн...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

EUVD-2026-76132

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-3869

CVE-2026-3869 is a Critical (CVSS 4.0: 9.2) vulnerability in the Schneider Electric Modicon M580 programmable logic controller (PLC). The flaw is a CWE-303 (Incorrect Implementation of Authentication Algorithm) that can lead to loss of confidentiality, integrity, and availability of the PLC when ...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2018-7842

CVE-2018-7842 Затронутые продукты Schneider Electric Modicon M580 Версия 2.90 Schneider Electric Modicon M340 Версия 3.10 Schneider Electric Modicon Premium Все версии Schneider Electric Modicon Quantum Все версии Ссылки https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

Stuxnet

Stuxnet 이 저장소는 악명 높은 Stuxnet 웜의 순수 교육 및 연구 목적의 재구성본을 포함하고 있습니다. 이는 2010년에 발견된 원본 바이너리 샘플에 대해 글로벌 보안 연구 커뮤니티가 수행한 수많은 리버스 엔지니어링 작업의 산출물입니다. 고지 사항: 이 코드는 학술 연구, 악성코드 분석 교육, 방어적 연구 목적으로만 제공됩니다. 악의적인 목적으로 사용되도록 의도된 것이 아니며, 배포 가능한 악성코드도 아닙니다. 저자와 기여자들은 불법적이거나 비윤리적인 활동을 용납하지 않습니다. 목차 개요 핵심 구성 요소 기술 아키텍...

CVE-2018-7849

CVE-2018-7849 영향을 받는 제품 Schneider Electric Modicon M580 버전 2.90 Schneider Electric Modicon M340 버전 3.10 Schneider Electric Modicon Premium 모든 버전 Schneider Electric Modicon Quantum 모든 버전 참고 자료 https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

ICSFuzz

ICSFuzz: ICS 제어 애플리케이션용 퍼징 도구 개요 ICSFuzz는 ICS 제어 애플리케이션의 취약점을 발견하기 위한 PLC 측 퍼징 도구입니다. 작성자: Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala 설치 이 도구는 사용자 머신에 이미 설치된 크로스 컴파일러가 필요합니다. 퍼저는 PLC에서 네이티브로 실행되므로 OSELAS와 같은 ARM 기반 크로스 툴체인으로 컴파일되어야 합니다. 이러한 툴체인을 설치하려면 다음 링크의 지침을...

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence AI-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers PLCs to conduct reconnaissance and...

CVE-2026-47721 FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not consistently enforce authJwt.haveAdminPermission for scheduler settings. An authenticated non-admin operator can create or...

CVE-2026-47721

FUXA versions prior to 1.3.2 fail to enforce admin permissions on POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js, allowing authenticated non-admin operators to schedule actions invoking onSetValue or onRunScript, enabling PLC setpoint changes and server-side script...

CVE-2026-47720 FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...