Using nmap NSE scripts for identifying common application vulnerabilities.
using some well-known service to provide info on vulnerabilities. it's link: https://github.com/vulnersCom/nmap-vulners
enhances nmap to a vulnerability scanner,looked up in an offline version of VulDB.
it's link: https://github.com/scipag/vulscan
vulnerability database : https://www.computec.ch/projekte/vulscan/?s=download
for identifying common ICS protocols
it's link: https://github.com/hi-KK/ICS-Protocol-identify