gallia

Gallia Gallia는 자동차 도메인에 초점을 맞춘 확장 가능한 침투 테스트 프레임워크입니다. 이 도구 체인의 범위는 단일 ECU부터 전체 자동차에 이르기까지 침투 테스트를 수행하는 것입니다. 현재 주요 초점은 UDS 인터페이스에 있습니다. 일반 인터페이스로 작동하는 로깅 기능은 재현 가능한 테스트를 구현하고 후처리 작업을 가능하게 합니다. 문서는 docs/ 폴더에서 확인할 수 있습니다. 이 프로젝트는 연구 및 개발 용도로만 사용해야 한다는 점을 명심하십시오! 부적절한 사용은 테스트 대상 장치에 돌이킬 수 없는 손상을 초래...

CANalyzat0r

이 소프트웨어 프로젝트는SCHUTZWERK에서 Aalen University와 협력하여 Philipp Schmied @CaptnBanana가 작성한 학사 논문의 결과물입니다. 자세한 내용은 해당블로그 게시글을 참조하십시오. 왜 또 다른 CAN 도구인가? 분석 메커니즘에 대한 새로운 아이디어로 처음부터 구축 다른 많은 도구의 기능을 한 곳에 모음 모듈식이며 확장 가능: 문서를 읽고 자신만의 분석 메커니즘을 구현하세요 GUI를 사용한 편리한 분석 데이터베이스를 사용하여 별도의 프로젝트에서 작업 관리 문서화: 매뉴얼이나 기술 정보가...

renef-skills

renef-skills Claude Code用のプラグイン で、AIエージェントが renef.ioを正しく操作 できるようにします — Android ARM64 向けの動的計装エンジンです：ネイティブ＆Java関数のフック、プロセスメモリのスキャン/読み取り/書き込み/パッチ、システムコールのトレース、 そしてLua 5.4 スクリプトによるSSLピンニング/root検出のバイパス（memfdインジェクション、ptrace不使用）。 これは操作マニュアルであり、チュートリアルではありません。すでにFridaフック、...

binbloom

소개 이 프로젝트의 목적은 원시 바이너리 펌웨어를 분석하여 일부 특징을 자동으로 결정하는 것입니다. 이 도구는 기본적으로 단순한 통계를 수행하므로 모든 아키텍처와 호환됩니다. 주요 기능: 로딩 주소Loading address : binbloom은 원시 바이너리 펌웨어를 구문 분석하여 로딩 주소를 결정할 수 있습니다. 엔디언Endianness : binbloom은 휴리스틱을 사용하여 펌웨어의 엔디언을 결정할 수 있습니다. UDS 데이터베이스 : binbloom은 원시 바이너리 펌웨어를 구문 분석하여 UDS 명령 ID가 포함된 배...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

ODIS-project-explorer

ODIS 프로젝트 탐색기 Nefarious Motorsports 포럼 스레드: http://nefariousmotorsports.com/forum/index.php?topic=23836.0 이 Python 프로젝트는 MCD Runtime Projects에 저장된 데이터를 언팩하고 활용하기 위한 것입니다 흔히 ".db and .key files "라고 알려진. 일반적으로 이러한 파일은 MCD Kernel에 의해 사용되며, 이후 ODIS나 iDEX 등에서 사용됩니다. 모든 ODIS 설치에는...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – 재생 공격을 통한 자동차 UDS 인증 우회 프로그램 코드 Python CAN‑UDS 시뮬레이터 udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challenge = random.randbytes8 return self.challenge def...

CVE-2026-79994 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

CVE-2026-79994 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

Astra Linux – Vulnerability in Wireshark

The UDS protocol dissector infinite loop in Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows for denial of service attacks...

openSUSE 16: libwireshark18 / libwiretap15 / libwsutil16 / wireshark / etc (openSUSE-SU-2026:21534-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21534-1 advisory. Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash bsc1263727. - CVE-2026-7375: UDS protocol dissector infinite loop...

The vulnerability of the UDS protocol analyzer, which is used by Wireshark for analyzing computer network traffic, allows a hacker to cause a service failure.

The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-58159

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

UBUNTU-CVE-2026-58159

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

CVE-2026-58159 Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

CVE-2026-58159: Incorrect Authorization

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

CVE-2026-54772

CoreWCF (net.tcp/net.pipe/net.uds) prior to versions 1.8.1 and 1.9.1 is affected. An unauthenticated remote attacker can trigger premature EOF handling in the framing handshake, causing one server thread-pool worker to be pinned at 100% CPU per connection and potentially exhausting CPU with multi...

The vulnerability of Keycloak’s client authentication mechanism in the UDS Identity Config configuration package allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the client authentication mechanism in the UDS Identity Config configuration package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

CVE-2026-46389

UDS Identity Config builds the Keycloak configuration image realm, plugins, theme, truststore, JARs consumed by UDS Core's Identity deployment. In versions 0.11.0 through 0.26.0, a logic error in the client-kubernetes-secret Keycloak client authenticator shipped by uds-identity-config and consume...

CVE-2026-42485

AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3 bytes,...