icsScanner
icsScanner performs active discovery and bounded, read-mostly assessment of ICS/OT devices. Its design centers on safety: destructive or physically-actuating checks live behind a two-step plan/confirm tier with no single-command execution path.
Its protocol reverse-engineering feeds icsFuzzer — several of the Protocol Guides began as wire formats recovered while building icsScanner checks.