Find my latest publications and the latest information about industrial cybersecurity

Tools to interact with Siemens PLCs

Zeek Ethercat Parser - CISA ICSNPP

Tools, tips, tricks, and more for exploring ICS Security.

PowerShell script for hardening Siemens Simatic PCS 7 servers

APT & CyberCriminal Campaign Collection

Snort rules

MAS - Modbus Attack Scripts

This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.

A set of ICS IDS rules for use with Suricata.

A prototype of rule generator for process-aware monitoring system implementing IEC-60870-5-104 protocol and Bro monitoring tool.

ICS/SCADA/PLC Discovery Tools Releases

SCADA StrangeLove Default/Hardcoded Passwords List

Project page

Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware

The pattern matching swiss knife

APT & CyberCriminal Campaign Collection

Malwares from Pastebin crawler

Personnal Malware analysis

A list of information security companies that offer penetration testing services and/or other offensive red side orientated services at any level in Australia and New Zealand.

CVE2020-0796 SMBv3 RCE

Code written as part of our various malware investigations

Indicators of Compromises (IOC) of our various investigations

ICS/SCADA honeypot

A Python based parser for Microsoft Access database files

Triconex TriStation utilities and tools