Alternatives and similar repositories for icsnpp-enip

Users that are interested in icsnpp-enip are comparing it to the libraries listed below

• cisagov / icsnpp-ethercat

  View on GitHub
  Zeek Ethercat Parser - CISA ICSNPP
  ☆18Nov 6, 2025Updated 3 months ago
• cisagov / icsnpp-opcua-binary

  View on GitHub
  Zeek OPCUA Binary Parser - CISA ICSNPP
  ☆21Nov 19, 2025Updated 2 months ago
• cisagov / icsnpp-genisys

  View on GitHub
  Industrial Control Systems Network Protocol Parsers (ICSNPP) - Genisys over TCP/IP
  ☆22Nov 19, 2025Updated 2 months ago
• cisagov / icsnpp-s7comm

  View on GitHub
  Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP
  ☆28Nov 19, 2025Updated 2 months ago
• cisagov / icsnpp-modbus

  View on GitHub
  Zeek Modbus Extension Scripts - CISA ICSNPP
  ☆20Dec 16, 2025Updated 2 months ago
• amzn / zeek-plugin-enip

  View on GitHub
  Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards
  ☆46May 30, 2024Updated last year
• cisagov / icsnpp-bacnet

  View on GitHub
  Zeek BACnet Parser - CISA ICSNPP
  ☆22Nov 6, 2025Updated 3 months ago
• amzn / zeek-plugin-s7comm

  View on GitHub
  Zeek network security monitor plugin that enables parsing of the S7 protocol
  ☆41May 30, 2024Updated last year
• cutaway-security / CloudSec-IACS

  View on GitHub
  Cloud security documents and tools to assist with conducting risk assessments that conform to the ICS62443 guidelines
  ☆10Apr 24, 2023Updated 2 years ago
• amzn / zeek-plugin-bacnet

  View on GitHub
  Zeek network security monitor plugin that enables parsing of the BACnet standard building controls protocol
  ☆30Apr 23, 2025Updated 9 months ago
• reidmefirst / WirelessHART-Parser

  View on GitHub
  Wireshark dissector for wirelessHART
  ☆13Aug 2, 2017Updated 8 years ago
• amzn / zeek-plugin-tds

  View on GitHub
  Zeek network security monitor plugin that enables parsing of the Tabular Data Stream (TDS) protocol
  ☆25May 30, 2024Updated last year
• smartgridadsc / Goose-protocol-parser-for-Zeek-IDS

  View on GitHub
  ☆22May 11, 2022Updated 3 years ago
• claroty / License-to-Kill

  View on GitHub
  ☆13Oct 27, 2020Updated 5 years ago
• cutaway-security / cutsec_presentations

  View on GitHub
  Presentation Slides and Resources
  ☆16Jun 12, 2024Updated last year
• cisagov / ICSNPP

  View on GitHub
  Industrial Control Systems Network Protocol Parsers
  ☆189Sep 4, 2025Updated 5 months ago
• CrySyS / bro-step7-plugin

  View on GitHub
  A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.
  ☆16Mar 26, 2017Updated 8 years ago
• claroty / enip-stack-detector

  View on GitHub
  EtherNet/IP & CIP Stack Detector
  ☆49Aug 4, 2022Updated 3 years ago
• thiagoralves / EtherSploit-IP

  View on GitHub
  Exploiting Allen-Bradley E/IP PLCs
  ☆80Apr 24, 2020Updated 5 years ago
• cutaway-security / goosestalker

  View on GitHub
  Python / Scapy tool to analyze and interact with IEC 61850 Goose traffic
  ☆37Dec 15, 2021Updated 4 years ago
• corelight / cve-2021-44228

  View on GitHub
  Log4j Exploit Detection Logic for Zeek
  ☆19Nov 25, 2025Updated 2 months ago
• otoriocyber / CIMPLICITY-Hardening-Tool

  View on GitHub
  PowerShell script for hardening GE digital CIMPLICITY servers
  ☆23Aug 12, 2021Updated 4 years ago
• akiUp / ICSUnitSim

  View on GitHub
  Simulation of Industrial process unit on ESP32 board with ModbusTCP interface
  ☆22Sep 19, 2020Updated 5 years ago
• cutaway-security / ICSPcapViz

  View on GitHub
  A packet capture visualizer for industrial control networks.
  ☆55Dec 4, 2023Updated 2 years ago
• corelight / zeek-quic

  View on GitHub
  Bro analyzer that detects Google's QUIC protocol
  ☆10Mar 2, 2021Updated 4 years ago
• michaelj0hn / iec104

  View on GitHub
  IEC104 Client for Metasploit
  ☆11Aug 6, 2018Updated 7 years ago
• Cisco-Talos / badgerboard

  View on GitHub
  ☆17Mar 8, 2024Updated last year
• wavestone-cdt / fun-with-modbus-0x5a

  View on GitHub
  Material from ICS Village talk at DEFCON 25
  ☆12Jul 30, 2018Updated 7 years ago
• industrialarmy / ics_exploits

  View on GitHub
  Exploit funcionales para pruebas de seguridad en entornos industriales
  ☆11Jul 8, 2020Updated 5 years ago
• hpcn-uam / DNP3-Attack-Detection-System

  View on GitHub
  Simple packet dissector that detects anomalous DNP3 traffic by analysing its parameters
  ☆15Jan 12, 2016Updated 10 years ago
• Vadoola / pv-unlocker

  View on GitHub
  Unlock PanelView Files
  ☆18Feb 4, 2026Updated last week
• cutaway-security / IACS_STAR_Methodology

  View on GitHub
  A risk rating calculation methodology that uses the OWASP Risk Rating Methodology as a basis.
  ☆32Sep 4, 2024Updated last year
• theparanoids / spicy-noise

  View on GitHub
  A Spicy protocol analyzer for WireGuard
  ☆29Aug 11, 2020Updated 5 years ago
• kenexis / PortableICS-MITM

  View on GitHub
  Set of data collected during a series of man-in-the-middle (MITM) attacks run against the Kenexis Portable Industrial Control System (ICS…
  ☆27Nov 17, 2015Updated 10 years ago
• madconnon / SCADA-Rules

  View on GitHub
  Snort rules
  ☆11Oct 22, 2015Updated 10 years ago
• mandiant / rpdebug_qnx

  View on GitHub
  ☆14Jun 1, 2023Updated 2 years ago
• qut-infosec / 2017QUT_DNP3

  View on GitHub
  DNP3 Cyber-attack datasets
  ☆15Mar 9, 2017Updated 8 years ago
• jubnzv / iec-checker

  View on GitHub
  Static analysis of IEC 61131-3 programs
  ☆86May 21, 2025Updated 8 months ago
• mmguero-dev / Malcolm-PCAP

  View on GitHub
  This repository has been archived in favor of https://github.com/idaholab/Malcolm-Test-Artifacts
  ☆37Dec 11, 2024Updated last year