The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt innovations, and developments in the IoT market while still ensuring comparability of test results.
☆129Aug 2, 2026Updated last month
Alternatives and similar repositories for owasp-istg
Users that are interested in owasp-istg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A lab using GasPot containers.☆19Mar 15, 2026Updated 5 months ago
- Zeek Ethercat Parser - CISA ICSNPP☆18Mar 3, 2026Updated 6 months ago
- A risk rating calculation methodology that uses the OWASP Risk Rating Methodology as a basis.☆35Sep 4, 2024Updated 2 years ago
- The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers,…☆493Jun 8, 2026Updated 3 months ago
- Beer-ISAC Community Resources☆27Jan 22, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ICS/OT related Wireshark profiles + adding some other (IT or OT related) Open Source Wireshark Profiles☆19Mar 21, 2025Updated last year
- A Microsoft Threat Modelling tool template for ICS threat modelling☆13Aug 20, 2020Updated 6 years ago
- Cyber-Informed Engineering addresses how cyberattacks on engineered systems threaten physical safety and reliability beyond data loss. Th…☆18Jun 1, 2026Updated 3 months ago
- VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/def…☆14Aug 11, 2020Updated 6 years ago
- Presentation Slides and Resources☆16Jun 12, 2024Updated 2 years ago
- Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP☆29Aug 19, 2026Updated 2 weeks ago
- Fork Threat Modeling Platform - Community☆30Updated this week
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated last month
- Wireshark dissector for wirelessHART☆13Aug 2, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.☆16Mar 26, 2017Updated 9 years ago
- ECED440 Computer Security☆11Apr 6, 2026Updated 5 months ago
- GitHub Repository for the HW CWE SIG☆20Jul 24, 2026Updated last month
- A U-Boot hacking toolkit for security researchers and tinkerers☆40Jan 10, 2025Updated last year
- A security-first linter for code that shouldn't need linting☆19Sep 12, 2023Updated 2 years ago
- A Curated list of Security Resources for all connected things☆3,533Aug 29, 2026Updated last week
- ICS security resources☆140May 7, 2025Updated last year
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆22May 9, 2023Updated 3 years ago
- ICSGoat: A Damn Vulnerable ICS Infrastructure☆37Aug 26, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Simulation of Industrial process unit on ESP32 board with ModbusTCP interface☆22Sep 19, 2020Updated 5 years ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- Exploit funcionales para pruebas de seguridad en entornos industriales☆11Jul 8, 2020Updated 6 years ago
- IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly foun…☆930Oct 5, 2025Updated 11 months ago
- AI Powered Sensitive Information Detection☆21Mar 13, 2024Updated 2 years ago
- The ICS Advisory Project is an open-source project to provide CISA ICS Advisories data in Comma Separated Value (CSV) format to support v…☆100Updated this week
- Zeek OPCUA Binary Parser - CISA ICSNPP☆21Aug 24, 2026Updated 2 weeks ago
- A BACnet layer for Scapy☆13Nov 25, 2015Updated 10 years ago
- The Secure Pipeline Verification Standard (SPVS) is a comprehensive, security-focused framework designed to assess, enhance, and standard…☆78Aug 13, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Set of data collected during a series of man-in-the-middle (MITM) attacks run against the Kenexis Portable Industrial Control System (ICS…☆27Nov 17, 2015Updated 10 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- Statically compiled binaries for various architectures.☆18Oct 12, 2022Updated 3 years ago
- ☆29Dec 26, 2025Updated 8 months ago
- Operational Technology (OT) Simulator☆59Aug 18, 2026Updated 3 weeks ago
- ☆15May 30, 2026Updated 3 months ago
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 5 months ago