Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

ICS/SCADA Security Resource（整合工控安全相关资源）

A curated list of tools related to Industrial Control System (ICS) security and Penetration Testing

Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware

stuxnet Source & Binaries. (+PLC ROOTKIT) ONLY FOR ACADEMICAL RESEARCH AND EDUCATIONAL PURPOSES! Includes: Source files, Binaries, PLC Samples,Fanny Added in another repo.

Collection of writeups on ICS/SCADA security.

Real world and CTFs exploiting web/binary POCs.

ICS Incident Response Automation Framework Python framework for executing automated incident response playbooks in ICS/SCADA environments. Supports network isolation, forensic preservation, logic restoration, and safety system interventions. Designed for defenders, researchers, and red team simulations in operational technology networks.

GRFICSv3 is a FREE and open source OT security lab with realistic networking and a 3D process simulation for training and learning ICS security

List of some cybersecurity conferences

Embedded AppSec Best Practices

This work aims at using different machine learning techniques in detecting anomalies (including hardware failures, sabotage and cyber-attacks) in SCADA water infrastructure.

A collection of awesome software, libraries, documents, books, resources and cool stuff about industrial control systems in cybersecurity.

All-in-one ICS/SCADA hacking, red teaming, malware analysis, detection, and lab architecture cheat sheet

A list of ICS scanners. It is an aggregation of multiple sources (honeypot, shodan, greynoise...).

Suricata rules for SCADA

Comprehensive methodology, checklists, and hardening guides for ICS/OT Cybersecurity Audits based on IEC 62443 & NIST SP 800-82. Focus on defensive security practices and risk mitigation in industrial environments.

Multi-protocol ICS security scanner detecting vulnerabilities in Modbus, S7, DNP3, BACnet, MQTT & SNMP. Features configurable scan intensities, safe-by-default operation & comprehensive reporting. Identifies misconfigurations & security flaws in industrial environments.

Public repo of papers and publications

Suite of scripts developed to emulate operational technologies and industrial control systems.