1112 matches found
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
doggie
Descripción general del proyecto Doggie y evilDoggie Doggie es un proyecto modular de código abierto diseñado para construir un adaptador CAN Bus a serial USB, BLE, UART casero. Conecta tu computadora a una red CAN Bus mediante el protocolo slcan CAN sobre Serial para compatibilidad con...
doggie
Doggie and evilDoggie Project Overview Doggie is an open-source, modular project designed to build a DIY CAN Bus to serial adapter USB, BLE, UART. It connects your computer to a CAN Bus network using the slcan protocol CAN over Serial for compatibility with tools like SocketCAN and Python-can. Th...
awesome-connected-things-sec
🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems...
gallia
Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...
CANToolz
CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...
HydraLINCAN
HydraLINCAN shield for HydraBus CAN and LIN Bus shield for Hydrabus http://hydrabus.com/ Refer to Hydrabus Wiki for more information on usage. https://github.com/hydrabus/hydrafw/wiki/HydraFW-CAN-guide New version with cleaner and easier to read silkscreen. Here is the wiring schema for HydraLINC...
IoT-Pentest-devices-and-purpose
IoT Pentest Devices and Their Purpose - 2025 Edition This document outlines the latest tools and hardware for IoT security testing in 2025, covering different protocols and technologies. It includes cutting-edge attacks, newly discovered vulnerabilities, and updated hardware and software tools wi...
workshop_firmware_reverse_engineering
Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...
Pwn2Own-Auto-2024-CHARX
Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...
CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU
CVE-2026-21014 – CAN Bus Frame Replay Attack on Automotive ECU Program Code Python SocketCAN sim root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def receivecan: return...
CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack
CVE-2026-23004 – Automotive UDS Authentication Bypass via Replay Attack Program Code Python CAN‑UDS sim root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challeng...
The_Automotive_Threat_Modeling_Template
Antecedentes Un taller de modelado de amenazas para tecnologías relacionadas con la automoción requiere DFD con elementos personalizados, amenazas adaptadas y recomendaciones específicas. La falta de una plantilla específica para el modelado de amenazas de automoción dio lugar al desarrollo de la...
CVE-2026-25278
CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...
CVE-2024-53922
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel...
CVE-2024-53922: Improper Validation of Specified Quantity in Input
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel...
awesome-connected-things-sec — Updated!
🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. Contents Hardware Attacks Fundamentals Interface Attacks Memory Extraction Side-Channel and Fault Injection PCIe and DMA Attacks Wireless Protocols RF...
CVE-2026-71396 Use of Hard-coded Credentials in Bendix EC80 Brake ECU
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...
CVE-2026-71396
CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...
