The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the “Tekon” SCADA system, related to the incorrect assignment of permissions for critical resources, allows for the increase of its privileges.

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Investigación de seguridad y técnicas de explotación para sistemas IoT, embebidos, industriales y automotrices. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTIC...

SCADAShutdownTool

SCADA关机工具 SCADA安全测试工具 SCADAShutdownTool 是一个工业控制系统自动化与测试工具，允许安全研究人员和专家测试SCADA安全系统、枚举从站控制器、读取控制器寄存器值以及重写寄存器数据。 SCADAShutdownTool 支持枚举控制器的所有寄存器类型，包括线圈输出、数字输入、模拟输入、保持寄存器和扩展寄存器。 SCADAShutdownTool 可以在不同模式下运行，包括： 安全模式：只读并列出非零值。 真实模式：仅重写非零值。 攻击模式：重写所有控制器寄存器。 控制器的寄存器可以使用默认值或用户指定的“关机值”进行重写。 SCADAShutdownTo...

CVE-2021-26828-Ultimate

ScadaFlare - Kit de explotación de RCE autenticado CVE-2021-26828 Exploit modular de RCE post-autenticación dirigido a ScadaBR 1.1.0, mejorado para operaciones de red team. Características Sube una shell .jsp armada a través de viewedit.shtm Compatible con payloads de Linux y Windows Soporte de...

FUXAPWN

CVE-2026-25895 — FUXA ），当 FUXA 以 root 身份运行时（厂商 Docker 镜像中的默认设置），在 60 秒内实现代码执行 在 FUXA Node 进程中安装 HTTP webshell 监听器 将 SSH 公钥投放至 /root/.ssh/authorizedkeys 或任何用户...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A system software information disclosure exists due to lack of authentication for /html/device-id. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16671 info: name:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without authentication, even when secureEnabled is true. The secureFnc middleware auto-generates a valid guest JWT when no token is provided, bypassing authentication. Exposed data includes server-side scripts, device...

recon-skills

🛡️ Recon & Pentest Skill Pack 169 habilidades ofensivas de seguridad para reconocimiento y pentest. Técnicas validadas en campo a partir de más de 600 objetivos corporativos en más de 45 sectores. Actualizado con evasión de huellas de navegador, bypass anti-bot, búsqueda de credenciales...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 允许远程代码执行（当攻击者具有管理员权限时），通过编写恶意C脚本并在服务器上执行（默认通过管理员控制面板的服务器设置，端口8101）。 使用方法： python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd "shutdown /s /t 30" PoC：...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper NMAP Turkish This research paper has already been published before and you can also find the original .pdf version at here...

mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 硬编码凭据 CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as described here...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

CirCarLife Scada <4.3 - System Log Exposure

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. id: CVE-2018-12634 info: name: CirCarLife Scada 4.3 - System Log...

CVE-2026-36226

CVE-2026-36226：Advantech WebAccess/SCADA 创建新项目用户 XSS 概念验证 此仓库包含针对 CVE-2026-36226 的无害概念验证，该漏洞是 Advantech WebAccess/SCADA 8.0-2015.08.16 中的跨站脚本问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于您不拥有或未经明确许可测试的系统。 概述 Advantech WebAccess/SCADA 8.0-2015.08.16 在管理仪表盘的创建新项目用户组件中存在一个跨站脚本漏洞。decryption...

CVE-2025-41656

CVE-2025-41656 项目总结 本项目旨在模拟CVE-2025-41656 ——一个针对 NodeRED 的未认证远程代码执行漏洞。为此，我们创建了一个小型 SCADA 系统，包含树莓派、执行器和传感器。树莓派中运行着 NodeRED 和 OpenPLC 容器，两者通过 Modbus TCP 通信以控制执行器。此 Python 概念验证脚本用于执行 CVE-2025-41656 攻击。目标是成功构建 PoC 并找到加固系统安全的修复措施。 入门指南 实验环境将包含以下组件 树莓派 3b+ 包含 NodeRED 和 OpenPLC 容器的 Docker Compose 文件 一个执...

Nordex NC2 - Cross-Site Scripting

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...

sel4-ics-gateway-demo

seL4 ICS Gateway Demo A defensive security research project comparing protocol-break vs packet-forwarding architectures for protecting industrial control systems from cyber attacks. Documentation: Network Architecture - Network diagrams and traffic flow Container Architecture - Docker container...