ICS Scripts

Developed as a community asset

Various

• Claroty ICS Scripts - Various scripts from the Claroty team
• ICSSecurityScripts - Various industrial security Python scripts from Tijl Deneut

Enumeration

• Redpoint - Digital Bond's ICS Enumeration Tools (NMAP NSE scripts).
• Drainware NMAP SCADA NSEs - A collection of NSE scripts from drainware.
• Misc SCADA Tools - A collection of miscellaneous SCADA tools written in python.
• Siemens NSE Scripts - Siemens-based discovery scripts
• macDetec - Passive ICS Network Scanner based on MAC Address Detection

Exploitation

• GE Proficy HMI SCADA CIMPLICITY Privilege Management Vulnerability - ICSA-16-194-02 - Local privilege escalation exploit from ExploitDB.
• Rockwell FactoryTalk Activation Server Denial of Service Vulnerability - CVE-2012-0221 - Denial of Service exploit from ExploitDB.

Device Access

• PowerMeter Reader - Python code to read energetic usage data from a modbus connected PowerMeter device. Tested against Schneider Electric iEM3255 (Acti 9 iEM 3000 series - code A9MEM3255).

Other

• ICS-Petya Resources - A variety of items related to Petya/Not-Petya.

(creative commons license)