The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt innovations, and developments in the IoT market while still ensuring comparability of test results.
☆132Aug 2, 2026Updated 2 months ago
Alternatives and similar repositories for owasp-istg
Users that are interested in owasp-istg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A lab using GasPot containers.☆19Mar 15, 2026Updated 7 months ago
- Zeek Ethercat Parser - CISA ICSNPP☆18Mar 3, 2026Updated 7 months ago
- OWASP IoT Security Verification Standard (ISVS)☆162Aug 2, 2026Updated 2 months ago
- ☆13Nov 5, 2021Updated 4 years ago
- The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers,…☆503Jun 8, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ICS/OT related Wireshark profiles + adding some other (IT or OT related) Open Source Wireshark Profiles☆19Mar 21, 2025Updated last year
- A Microsoft Threat Modelling tool template for ICS threat modelling☆14Aug 20, 2020Updated 6 years ago
- Cyber-Informed Engineering addresses how cyberattacks on engineered systems threaten physical safety and reliability beyond data loss. Th…☆18Jun 1, 2026Updated 4 months ago
- VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/def…☆14Aug 11, 2020Updated 6 years ago
- Presentation Slides and Resources☆16Jun 12, 2024Updated 2 years ago
- Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP☆31Aug 19, 2026Updated last month
- Fork Threat Modeling Platform - Community☆30Oct 1, 2026Updated 2 weeks ago
- Wireshark dissector for wirelessHART☆13Aug 2, 2017Updated 9 years ago
- Cloud security documents and tools to assist with conducting risk assessments that conform to the ICS62443 guidelines☆14Mar 20, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Fraktal's take on building an affordable Laser Fault Injection Rig☆101Oct 2, 2024Updated 2 years ago
- A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.☆16Mar 26, 2017Updated 9 years ago
- GitHub Repository for the HW CWE SIG☆20Sep 23, 2026Updated 3 weeks ago
- A U-Boot hacking toolkit for security researchers and tinkerers☆41Jan 10, 2025Updated last year
- A Curated list of Security Resources for all connected things☆3,560Updated this week
- IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly foun…☆947Oct 5, 2025Updated last year
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆22May 9, 2023Updated 3 years ago
- ICSGoat: A Damn Vulnerable ICS Infrastructure☆37Aug 26, 2024Updated 2 years ago
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Simulation of Industrial process unit on ESP32 board with ModbusTCP interface☆22Sep 19, 2020Updated 6 years ago
- Exploit funcionales para pruebas de seguridad en entornos industriales☆11Jul 8, 2020Updated 6 years ago
- AI Powered Sensitive Information Detection☆21Mar 13, 2024Updated 2 years ago
- The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support v…☆100Oct 9, 2026Updated last week
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆114Feb 16, 2024Updated 2 years ago
- Zeek OPCUA Binary Parser - CISA ICSNPP☆21Updated this week
- A BACnet layer for Scapy☆13Nov 25, 2015Updated 10 years ago
- Statically compiled binaries for various architectures.☆19Oct 12, 2022Updated 4 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- The Secure Pipeline Verification Standard (SPVS) is a comprehensive, security-focused framework designed to assess, enhance, and standard…☆79Aug 13, 2026Updated 2 months ago
- ☆15May 30, 2026Updated 4 months ago
- Operational Technology (OT) Simulator☆60Sep 25, 2026Updated 3 weeks ago
- ☆20Sep 9, 2025Updated last year
- Evidence Layer for AI Agent Actions☆18Jun 27, 2026Updated 3 months ago
- ICS TestBed Framework☆70Jan 10, 2019Updated 7 years ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago