SMOD
SMOD is a modular framework with every kind of diagnostic and offensive feature you could need in order to pentest Modbus protocol. It is a full Modbus protocol implementation using Python and Scapy. This software could be run on Linux/OSX under Python 2.7.x. SCADA (Process Control Networks) based systems have moved from proprietary closed networks to open source solutions and TCP/IP enabled networks steadily over recent years. This has made them vulnerable to the same security vulnerabilities that face our traditional computer networks. The Modbus/TCP protocol was used as the reference protocol to display the effectiveness of the test bed in carrying out cyber attacks on a power system protocol. Modbus/TCP was chosen specifically for these reasons: Modbus is still widely used in power systems, Modbus/TCP is simple and easy to implement, and Modbus protocol libraries are freely available for utilities to implement smart grid applications. You can use this tool for vulnerability assessment of a Modbus protocol. Just a little demo showing off the basics: root@kali:~/smod# python smod.py _______ < SMOD > ------- \ ^__^ \ (xx)\_______ (__)\/\ U ||----w | SMOD >help
FEATURES
SIMILAR TOOLS
The Proxmark III is a versatile device for sniffing, reading, and cloning RFID tags with strong community support.
Modular framework for web services penetration testing with support for various attacks.
Metta is an information security preparedness tool for adversarial simulation.
Data exfiltration & infiltration tool using text-based steganography to evade security controls.
Open-source project for building instrumented environments to simulate attacks and test detections.
Offensive security tool for reconnaissance and information gathering with a wide range of features and future roadmap.
An open-source intelligence collection, research, and artifact management tool inspired by SpiderFoot, Harpoon, and DataSploit.
Self-hosted Fuzzing-As-A-Service platform for continuous developer-driven fuzzing.
A YARA interactive debugger for the YARA language written in Rust, providing features like function calls, constant evaluation, and string matching.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.