malice
SIMATIC-SMACKDOWN
| malice | SIMATIC-SMACKDOWN | |
|---|---|---|
| 1 | 8 | |
| 1,478 | 41 | |
| - | - | |
| 10.0 | 10.0 | |
| about 1 year ago | over 1 year ago | |
| Go | Go | |
| Apache License 2.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
malice
SIMATIC-SMACKDOWN
-
Repositories that have shaped me as an infosec student
ICS Malware dubbed SIMATIC Smackdown: https://github.com/RoseSecurity/SIMATIC-SMACKDOWN Red-Teaming TTPs: https://github.com/RoseSecurity/Red-Teaming-TTPs Web App Pentesting: https://github.com/RoseSecurity/ScrapPY ICS Metasploit Module: https://github.com/RoseSecurity/APOLOGEE OSINT CTF: https://github.com/RoseSecurity/Obfusc8ted
- Simatic Smackdown ICS Malware Adds Wiper Functionality
- Simatic Smackdown Malware Targeting PLCs Adds Features to Target More Devices
-
Malware Targeting Industrial Networks Published Openly on Github with Source Code for Researchers
VX-Underground recently released a new malware strain targeting ICS systems which was later revealed by RoseSecurity (https://github.com/RoseSecurity/SIMATIC-SMACKDOWN).
- ICS Malware Dubbed Simatic Smackdown Targets Siemens PLCs
- New ICS malware dubbed SIMATIC-SMACKDOWN could pose a distributed threat to PLCs
- New ICS malware targeting Siemens devices released to Github with source code
- New Golang malware targeting ICS released with source code
What are some alternatives?
Malware-Exhibit - 🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.
netz - Discover internet-wide misconfigurations while drinking coffee
turbo-scanner - A port scanner and service detection tool that uses 1000 goroutines at once to scan any hosts's ip or fqdn with the sole purpose of testing your own network to ensure there are no malicious services running.
ScrapPY - ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks against targets. The tool dives deep to discover keywords and phrases leading to potential passwords or hidden directories.
Malware-Sample-Sources - Malware Sample Sources
APOLOGEE - APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers (all versions prior to V3.5) and TALON TC BACnet Automation Controllers (all versions prior to V3.5). With a 7.5 CVSS, this exploit allows for an attacker to perform an authentication bypass using an alternate path or channel to access hidden directories in the web server. This repository takes advantage of CVE-2017-9947.
OneNoteAnalyzer - A C# based tool for analysing malicious OneNote documents
Obfusc8ted - You and the AppleLabs' Incident Response Team have been notified of a potential breach to a Human Resources' workstation. According to the Human Resources representative, they did not notice any anomalous activity while browsing the web, but the AppleLabs' system information and event management (SIEM) instance alerted on a suspicious domain. Moments later, the host-based intrusion detection system (HIDS) alerted on several malicious programs acting as potential keyloggers. While the AppleLabs' IT and Incident Response Teams struggle to find the answers, can you lend us your digital forensic experience to hunt down this threat actor?
Coldfire - Golang malware development library
vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
hawk - Multi Cloud Antivirus Scanning API using YARA and CLAMAV for AWS S3, Azure Blob Storage and GCP Cloud Storage
Red-Teaming-TTPs - Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!