industrialxpl-forge 1.0.0__tar.gz

industrialxpl_forge-1.0.0/LICENSE

@@ -0,0 +1,27 @@
+MIT License
+
+Copyright (c) 2026 André Henrique (@mrhenrike) | União Geek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+DISCLAIMER: This tool is intended for authorized security testing, research,
+and educational purposes only. Using this tool against systems you do not own
+or do not have explicit written permission to test is illegal. The author
+assumes no liability for misuse or damage caused by this software. Users bear
+full legal and ethical responsibility for all actions performed with this tool.

industrialxpl_forge-1.0.0/PKG-INFO

@@ -0,0 +1,256 @@
+Metadata-Version: 2.4
+Name: industrialxpl-forge
+Version: 1.0.0
+Summary: IndustrialXPL-Forge (IXF) — OT/ICS/SCADA/HMI/IIoT Security Assessment & Exploitation Framework. Python-First, 631+ modules, 79 MITRE ATT&CK for ICS techniques, 26 ICS malware TTPs, 50+ vendors, 50+ protocols.
+Author-email: André Henrique <henrique.santos@uniaogeek.com.br>
+Maintainer-email: André Henrique <henrique.santos@uniaogeek.com.br>
+License: MIT License
+        
+        Copyright (c) 2026 André Henrique (@mrhenrike) | União Geek
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+        DISCLAIMER: This tool is intended for authorized security testing, research,
+        and educational purposes only. Using this tool against systems you do not own
+        or do not have explicit written permission to test is illegal. The author
+        assumes no liability for misuse or damage caused by this software. Users bear
+        full legal and ethical responsibility for all actions performed with this tool.
+        
+Project-URL: Homepage, https://github.com/mrhenrike/IndustrialXPL-Forge
+Project-URL: Repository, https://github.com/mrhenrike/IndustrialXPL-Forge
+Project-URL: Documentation, https://github.com/mrhenrike/IndustrialXPL-Forge/wiki
+Project-URL: Bug Tracker, https://github.com/mrhenrike/IndustrialXPL-Forge/issues
+Project-URL: Changelog, https://github.com/mrhenrike/IndustrialXPL-Forge/releases
+Keywords: security,pentesting,ics,scada,ot-security,plc,hmi,modbus,s7comm,enip,dnp3,bacnet,profinet,iec61850,opc-ua,industrial-control-systems,red-team,exploit,vulnerability-scanner,cve,mitre-attack,ot-ics,iiot,xpl-forge,firewall-xpl,embed-xpl,industrial-exploit
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: Science/Research
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Natural Language :: English
+Classifier: Natural Language :: Portuguese (Brazilian)
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Networking
+Classifier: Topic :: Scientific/Engineering
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: requests>=2.32
+Requires-Dist: paramiko>=3.0
+Requires-Dist: pysnmp>=4.4
+Requires-Dist: scapy>=2.5
+Requires-Dist: rich>=13.0
+Requires-Dist: psutil>=5.9
+Provides-Extra: ot
+Requires-Dist: pymodbus>=3.5; extra == "ot"
+Requires-Dist: asyncua>=1.0; extra == "ot"
+Requires-Dist: cpppo>=4.3; extra == "ot"
+Provides-Extra: fieldbus
+Requires-Dist: python-can>=4.3; extra == "fieldbus"
+Provides-Extra: mes
+Requires-Dist: requests>=2.32; extra == "mes"
+Requires-Dist: paramiko>=3.0; extra == "mes"
+Provides-Extra: sast
+Requires-Dist: openai>=1.0; extra == "sast"
+Requires-Dist: anthropic>=0.20; extra == "sast"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+Requires-Dist: ruff>=0.4; extra == "dev"
+Requires-Dist: bandit>=1.7; extra == "dev"
+Requires-Dist: pip-audit>=2.6; extra == "dev"
+Requires-Dist: build>=1.0; extra == "dev"
+Requires-Dist: twine>=5.0; extra == "dev"
+Provides-Extra: full
+Requires-Dist: pymodbus>=3.5; extra == "full"
+Requires-Dist: asyncua>=1.0; extra == "full"
+Requires-Dist: cpppo>=4.3; extra == "full"
+Requires-Dist: python-can>=4.3; extra == "full"
+Requires-Dist: openai>=1.0; extra == "full"
+Requires-Dist: anthropic>=0.20; extra == "full"
+Dynamic: license-file
+
+# IndustrialXPL-Forge (IXF)
+
+> **The World's Largest OT/ICS/SCADA Security Assessment & Exploitation Framework**
+> Part of the XPL-Forge suite | Author: André Henrique ([@mrhenrike](https://github.com/mrhenrike)) | [União Geek](https://uniaogeek.com.br/)
+
+**Python-First — no Metasploit required. No msfconsole. No Ruby. Just Python.**
+
+---
+
+## Quick Start
+
+```bash
+pip install industrialxpl
+ixf
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/mrhenrike/IndustrialXPL-Forge
+cd IndustrialXPL-Forge
+pip install -r requirements.txt
+python ixf.py
+```
+
+---
+
+## What is IXF?
+
+IndustrialXPL-Forge is a modular, Python-native security assessment and exploitation framework for **Operational Technology (OT)**, **Industrial Control Systems (ICS)**, **SCADA**, **HMI**, **PLC**, **RTU**, **DCS**, and **IIoT** environments.
+
+It covers the **complete attack lifecycle**:
+
+```
+OSINT → Discovery → Fingerprint → Vulnerability Check → Exploit → Report
+```
+
+**Key features:**
+- **Python-First**: all core functionality works with `pip install industrialxpl` — no Metasploit, no msfconsole, no Java, no Ruby required
+- **SafeMode by default**: every module runs in simulate mode — prints payload without sending
+- **MITRE ATT&CK for ICS v19**: 79 techniques mapped, `ttp T0843 192.168.1.100` syntax
+- **CVE coverage**: 3,300+ ICS/OT CVEs from CVSS 0.1 to 10.0
+- **50 vendors**: Siemens, Schneider, Rockwell, ABB, Honeywell, Emerson, WEG, and more
+- **50 protocols**: Modbus, S7comm, EtherNet/IP, DNP3, BACnet, IEC-104, OPC UA, PROFINET, and more
+
+---
+
+## Module Catalog
+
+| Category | Modules | Description |
+|----------|---------|-------------|
+| `exploits/protocols/` | ~50 | Modbus, S7, ENIP, DNP3, BACnet, Profinet, IEC104, OPC UA |
+| `exploits/plc/` | ~80 | Siemens, Schneider, Rockwell, GE, Beckhoff, Unitronics, ABB |
+| `exploits/scada/` | ~60 | IGSS, RealWin, Genesis32, CoDeSys, FUXA, CitectSCADA |
+| `exploits/mes/` | ~25 | Ignition, ThinManager, SIMATIC Historian, DELMIA Apriso |
+| `scanners/ics/` | ~50 | Protocol-specific discovery (Modbus, S7, BACnet, DNP3...) |
+| `scanners/osint/` | ~8 | Shodan queries, ELITEWOLF web dorks, OT Hunt |
+| `creds/` | ~55 | Default credentials for 50+ OT/ICS vendors |
+| `cve/` | 3,300+ | All CVE severity levels (CVSS 0.1-10.0), 3 implementation tiers |
+| `cve/apt/` | ~10 | APT malware TTPs: FrostyGoop, Industroyer2, TRITON, INCONTROLLER |
+| `assessment/` | ~25 | IEC 62443, NIST 800-82r3, MITRE ICS, risk scoring, IR playbook |
+
+---
+
+## Usage Examples
+
+```
+# Open the IXF interactive shell
+ixf
+
+# Load and run a module (simulate mode by default — safe)
+ixf > use scanners/ics/modbus_detect
+ixf > set target 192.168.1.100
+ixf > check
+
+# Search for modules
+ixf > search siemens
+ixf > search CVE-2015-5374
+ixf > search modbus
+
+# Execute a TTP-ID against a target
+ixf > ttp T0843 192.168.1.100          # Program Download — all modules
+ixf > ttp T0878 10.0.0.0/24            # Alarm Suppression — subnet sweep
+ixf > ttp-list --tactic evasion        # List all Evasion TTP-IDs
+
+# MITRE ATT&CK for ICS sweep
+ixf > mitre-scan discovery 192.168.1.0/24
+ixf > mitre-scan evasion 192.168.1.100
+ixf > mitre-all 192.168.1.100          # All 79 techniques (simulate by default)
+ixf > mitre-coverage                   # Show coverage % per tactic
+
+# CVE-specific modules
+ixf > cve CVE-2026-25895               # FUXA SCADA pre-auth RCE
+ixf > cve CVE-2015-5374               # Siemens SIPROTEC4 DoS
+ixf > cve-scan 192.168.1.0/24         # Discover assets + test all CVEs
+
+# Generate reports
+ixf > report json
+ixf > mitre-report layer               # ATT&CK Navigator JSON layer
+```
+
+---
+
+## SafeMode / DestructiveMode
+
+**Every module defaults to simulate mode** — it prints what it WOULD do without sending any packets.
+
+```
+ixf (FrostyGoop) > run                 # SIMULATE: prints payload, no send
+ixf (FrostyGoop) > set simulate false
+ixf (FrostyGoop) > set destructive true
+ixf (FrostyGoop) > run                 # LIVE: shows banner + requires confirmation
+```
+
+Impact levels require proportional confirmation:
+- `INFO/READ`: automatic
+- `LOW`: simple warning
+- `MEDIUM`: press Enter
+- `HIGH`: type `yes`
+- `CRITICAL`: type the full confirmation string
+- `CATASTROPHIC`: type string + wait 10 seconds
+
+All destructive operations are logged to `.log/destructive_ops_YYYY-MM-DD.log`.
+
+---
+
+## Python-First Policy
+
+| Tier | Type | Examples | Required? |
+|------|------|----------|-----------|
+| **0** | Python stdlib | socket, struct, select | Always |
+| **1** | pip install | pymodbus, scapy, rich, requests | Yes |
+| **2** | pip extras | asyncua, cpppo, python-can | Optional |
+| **3** | External runtimes | ruby, node, java, gcc, go | **Optional — Python fallback always available** |
+
+No Metasploit installation required. All 64 MSF SCADA modules are ported to Python native.
+
+---
+
+## Legal Disclaimer
+
+This tool is intended for **authorized security testing, research, and educational purposes only**.
+
+Using IndustrialXPL-Forge against systems you do not own or do not have **explicit written authorization** to test is **illegal** and may violate computer fraud laws in your jurisdiction.
+
+OT/ICS systems control critical physical infrastructure. Unauthorized use may cause:
+- Physical damage to industrial equipment
+- Disruption of essential services (power, water, gas, manufacturing)
+- Personal injury or death
+- Significant legal penalties
+
+**The authors and União Geek assume no liability for misuse. Users bear full legal and ethical responsibility for all actions performed with this tool.**
+
+---
+
+## Author & Credits
+
+**Author:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) | [União Geek](https://uniaogeek.com.br/)
+
+Module sources: EmbedXPL-Forge (suite sibling), ISF/ICSSploit, ModBusSploit, Metasploit SCADA modules (ported to Python), n-days-poc-benchmark, InduGuard, ZeronTek OT Hunt research, CISA ICS-CERT advisories, Vedere Labs OT:ICEFALL.

industrialxpl_forge-1.0.0/README.md

@@ -0,0 +1,160 @@
+# IndustrialXPL-Forge (IXF)
+
+> **The World's Largest OT/ICS/SCADA Security Assessment & Exploitation Framework**
+> Part of the XPL-Forge suite | Author: André Henrique ([@mrhenrike](https://github.com/mrhenrike)) | [União Geek](https://uniaogeek.com.br/)
+
+**Python-First — no Metasploit required. No msfconsole. No Ruby. Just Python.**
+
+---
+
+## Quick Start
+
+```bash
+pip install industrialxpl
+ixf
+```
+
+Or from source:
+
+```bash
+git clone https://github.com/mrhenrike/IndustrialXPL-Forge
+cd IndustrialXPL-Forge
+pip install -r requirements.txt
+python ixf.py
+```
+
+---
+
+## What is IXF?
+
+IndustrialXPL-Forge is a modular, Python-native security assessment and exploitation framework for **Operational Technology (OT)**, **Industrial Control Systems (ICS)**, **SCADA**, **HMI**, **PLC**, **RTU**, **DCS**, and **IIoT** environments.
+
+It covers the **complete attack lifecycle**:
+
+```
+OSINT → Discovery → Fingerprint → Vulnerability Check → Exploit → Report
+```
+
+**Key features:**
+- **Python-First**: all core functionality works with `pip install industrialxpl` — no Metasploit, no msfconsole, no Java, no Ruby required
+- **SafeMode by default**: every module runs in simulate mode — prints payload without sending
+- **MITRE ATT&CK for ICS v19**: 79 techniques mapped, `ttp T0843 192.168.1.100` syntax
+- **CVE coverage**: 3,300+ ICS/OT CVEs from CVSS 0.1 to 10.0
+- **50 vendors**: Siemens, Schneider, Rockwell, ABB, Honeywell, Emerson, WEG, and more
+- **50 protocols**: Modbus, S7comm, EtherNet/IP, DNP3, BACnet, IEC-104, OPC UA, PROFINET, and more
+
+---
+
+## Module Catalog
+
+| Category | Modules | Description |
+|----------|---------|-------------|
+| `exploits/protocols/` | ~50 | Modbus, S7, ENIP, DNP3, BACnet, Profinet, IEC104, OPC UA |
+| `exploits/plc/` | ~80 | Siemens, Schneider, Rockwell, GE, Beckhoff, Unitronics, ABB |
+| `exploits/scada/` | ~60 | IGSS, RealWin, Genesis32, CoDeSys, FUXA, CitectSCADA |
+| `exploits/mes/` | ~25 | Ignition, ThinManager, SIMATIC Historian, DELMIA Apriso |
+| `scanners/ics/` | ~50 | Protocol-specific discovery (Modbus, S7, BACnet, DNP3...) |
+| `scanners/osint/` | ~8 | Shodan queries, ELITEWOLF web dorks, OT Hunt |
+| `creds/` | ~55 | Default credentials for 50+ OT/ICS vendors |
+| `cve/` | 3,300+ | All CVE severity levels (CVSS 0.1-10.0), 3 implementation tiers |
+| `cve/apt/` | ~10 | APT malware TTPs: FrostyGoop, Industroyer2, TRITON, INCONTROLLER |
+| `assessment/` | ~25 | IEC 62443, NIST 800-82r3, MITRE ICS, risk scoring, IR playbook |
+
+---
+
+## Usage Examples
+
+```
+# Open the IXF interactive shell
+ixf
+
+# Load and run a module (simulate mode by default — safe)
+ixf > use scanners/ics/modbus_detect
+ixf > set target 192.168.1.100
+ixf > check
+
+# Search for modules
+ixf > search siemens
+ixf > search CVE-2015-5374
+ixf > search modbus
+
+# Execute a TTP-ID against a target
+ixf > ttp T0843 192.168.1.100          # Program Download — all modules
+ixf > ttp T0878 10.0.0.0/24            # Alarm Suppression — subnet sweep
+ixf > ttp-list --tactic evasion        # List all Evasion TTP-IDs
+
+# MITRE ATT&CK for ICS sweep
+ixf > mitre-scan discovery 192.168.1.0/24
+ixf > mitre-scan evasion 192.168.1.100
+ixf > mitre-all 192.168.1.100          # All 79 techniques (simulate by default)
+ixf > mitre-coverage                   # Show coverage % per tactic
+
+# CVE-specific modules
+ixf > cve CVE-2026-25895               # FUXA SCADA pre-auth RCE
+ixf > cve CVE-2015-5374               # Siemens SIPROTEC4 DoS
+ixf > cve-scan 192.168.1.0/24         # Discover assets + test all CVEs
+
+# Generate reports
+ixf > report json
+ixf > mitre-report layer               # ATT&CK Navigator JSON layer
+```
+
+---
+
+## SafeMode / DestructiveMode
+
+**Every module defaults to simulate mode** — it prints what it WOULD do without sending any packets.
+
+```
+ixf (FrostyGoop) > run                 # SIMULATE: prints payload, no send
+ixf (FrostyGoop) > set simulate false
+ixf (FrostyGoop) > set destructive true
+ixf (FrostyGoop) > run                 # LIVE: shows banner + requires confirmation
+```
+
+Impact levels require proportional confirmation:
+- `INFO/READ`: automatic
+- `LOW`: simple warning
+- `MEDIUM`: press Enter
+- `HIGH`: type `yes`
+- `CRITICAL`: type the full confirmation string
+- `CATASTROPHIC`: type string + wait 10 seconds
+
+All destructive operations are logged to `.log/destructive_ops_YYYY-MM-DD.log`.
+
+---
+
+## Python-First Policy
+
+| Tier | Type | Examples | Required? |
+|------|------|----------|-----------|
+| **0** | Python stdlib | socket, struct, select | Always |
+| **1** | pip install | pymodbus, scapy, rich, requests | Yes |
+| **2** | pip extras | asyncua, cpppo, python-can | Optional |
+| **3** | External runtimes | ruby, node, java, gcc, go | **Optional — Python fallback always available** |
+
+No Metasploit installation required. All 64 MSF SCADA modules are ported to Python native.
+
+---
+
+## Legal Disclaimer
+
+This tool is intended for **authorized security testing, research, and educational purposes only**.
+
+Using IndustrialXPL-Forge against systems you do not own or do not have **explicit written authorization** to test is **illegal** and may violate computer fraud laws in your jurisdiction.
+
+OT/ICS systems control critical physical infrastructure. Unauthorized use may cause:
+- Physical damage to industrial equipment
+- Disruption of essential services (power, water, gas, manufacturing)
+- Personal injury or death
+- Significant legal penalties
+
+**The authors and União Geek assume no liability for misuse. Users bear full legal and ethical responsibility for all actions performed with this tool.**
+
+---
+
+## Author & Credits
+
+**Author:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) | [União Geek](https://uniaogeek.com.br/)
+
+Module sources: EmbedXPL-Forge (suite sibling), ISF/ICSSploit, ModBusSploit, Metasploit SCADA modules (ported to Python), n-days-poc-benchmark, InduGuard, ZeronTek OT Hunt research, CISA ICS-CERT advisories, Vedere Labs OT:ICEFALL.

industrialxpl_forge-1.0.0/industrialxpl/__main__.py

@@ -0,0 +1,21 @@
+"""IndustrialXPL-Forge entry point for 'python -m industrialxpl' and console script 'ixf'."""
+
+import sys
+
+
+def main() -> None:
+    """Launch the IXF interactive shell."""
+    from industrialxpl.interpreter import IXFInterpreter
+
+    interpreter = IXFInterpreter()
+    if len(sys.argv[1:]):
+        interpreter.nonInteractive(sys.argv)
+    else:
+        interpreter.start()
+
+
+if __name__ == "__main__":
+    try:
+        main()
+    except (KeyboardInterrupt, SystemExit):
+        pass

industrialxpl_forge-1.0.0/industrialxpl/core/exploit/__init__.py

@@ -0,0 +1,58 @@
+"""Public API for industrialxpl.core.exploit — re-exports for module authors."""
+
+from industrialxpl.core.exploit.exploit import (
+    BaseExploit,
+    Exploit,
+    Protocol,
+    mute,
+    multi,
+    GLOBAL_OPTS,
+)
+from industrialxpl.core.exploit.option import (
+    OptBool,
+    OptEncoder,
+    OptFloat,
+    OptIP,
+    OptInteger,
+    OptMAC,
+    OptPort,
+    OptString,
+    OptWordlist,
+    Option,
+)
+from industrialxpl.core.exploit.printer import (
+    print_error,
+    print_info,
+    print_status,
+    print_success,
+    print_table,
+    print_warning,
+    pprint_dict_in_order,
+    PrinterThread,
+    printer_queue,
+)
+from industrialxpl.core.exploit.safety import DestructiveGate
+from industrialxpl.core.exploit.exceptions import IXFException, OptionValidationError
+from industrialxpl.core.exploit.utils import (
+    index_modules,
+    import_exploit,
+    pythonize_path,
+    humanize_path,
+    module_required,
+    stop_after,
+    MODULES_DIR,
+    WORDLISTS_DIR,
+)
+
+__all__ = [
+    "BaseExploit", "Exploit", "Protocol", "mute", "multi", "GLOBAL_OPTS",
+    "OptBool", "OptEncoder", "OptFloat", "OptIP", "OptInteger",
+    "OptMAC", "OptPort", "OptString", "OptWordlist", "Option",
+    "print_error", "print_info", "print_status", "print_success",
+    "print_table", "print_warning", "pprint_dict_in_order",
+    "PrinterThread", "printer_queue",
+    "DestructiveGate",
+    "IXFException", "OptionValidationError",
+    "index_modules", "import_exploit", "pythonize_path", "humanize_path",
+    "module_required", "stop_after", "MODULES_DIR", "WORDLISTS_DIR",
+]

industrialxpl_forge-1.0.0/industrialxpl/core/exploit/exceptions.py

@@ -0,0 +1,21 @@
+"""IXF exception hierarchy."""
+
+
+class IXFException(Exception):
+    """Base exception for IndustrialXPL-Forge."""
+
+
+class OptionValidationError(IXFException):
+    """Raised when an option value fails validation."""
+
+
+class ModuleNotFoundError(IXFException):
+    """Raised when a module cannot be imported."""
+
+
+class ExploitRunError(IXFException):
+    """Raised when an exploit run encounters a fatal error."""
+
+
+class DestructiveOperationAborted(IXFException):
+    """Raised when the user declines the destructive-mode confirmation gate."""