1046 matches found
HydraLINCAN
HydraLINCAN shield for HydraBus CAN and LIN Bus shield for Hydrabus http://hydrabus.com/ Refer to Hydrabus Wiki for more information on usage. https://github.com/hydrabus/hydrafw/wiki/HydraFW-CAN-guide New version with cleaner and easier to read silkscreen. Here is the wiring schema for HydraLINC...
ret-sync
ret-sync ret-sync stands for Reverse-Engineering Tools SYNChronization. It is a set of plugins that help to synchronize a debugging session WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg with a disassembler IDA/Ghidra/Binary Ninja. The underlying idea is simple: take the best from both worlds static and...
doggie
Doggie and evilDoggie Project Overview Doggie is an open-source, modular project designed to build a DIY CAN Bus to serial adapter USB, BLE, UART. It connects your computer to a CAN Bus network using the slcan protocol CAN over Serial for compatibility with tools like SocketCAN and Python-can. Th...
gallia
Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...
CANToolz
CANToolz a.k.a. YACHT Yet Another Car Hacking Tool CANToolz is a framework for analysing CAN networks and devices. It provides multiple modules that can be chained using CANToolz's pipe system and used by security researchers, automotive/OEM security testers in black-box analysis. CANToolz can be...
doggie
Doggie 和 evilDoggie 项目概述 Doggie 是一个开源、模块化项目,旨在构建一个 DIY CAN 总线到串行适配器(USB、BLE、UART)。它使用 slcan 协议(CAN over Serial)将计算机连接到 CAN 总线网络,以兼容 SocketCAN 和 Python-can 等工具。该项目强调模块化,支持多种微控制器(例如 RP2040、STM32F103C8、ESP32)和 CAN 控制器(内置或 MCP2515)。 evilDoggie 是 Doggie 的攻击性固件变体,专为汽车安全研究和底层 CAN...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
workshop_firmware_reverse_engineering
Taller: Ingeniería inversa de firmware Este repositorio contiene las diapositivas y los materiales prácticos del taller de Emproof sobre ingeniería inversa de firmware, presentado en ScapyCon Automotive 2025. El taller está dirigido a un público técnico con experiencia mínima en seguridad y enseñ...
IoT-Pentest-devices-and-purpose
IoT 渗透测试设备及其用途 - 2025 版 本文档概述了 2025 年用于 IoT 安全测试的最新工具和硬件,涵盖了不同的协议和技术。它包括前沿攻击、新发现的漏洞,以及功能增强的更新版硬件和软件工具。 目录 蓝牙 Zigbee Z-Wave WiFi 硬件 侧信道攻击 SCA 汽车安全 射频 NFC 和 RFID 2025 年最新漏洞 AI 增强安全测试 蓝牙 软件工具| 硬件工具| 用途| 2025 年更新 ---|---|---|--- BrakTooth PoC 增强版| ESP32-WROVER| 测试蓝牙漏洞(CVE-2021-28139 及其变种)| 增强的利用能力,更广...
Pwn2Own-Auto-2024-CHARX
Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...
CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU
CVE-2026-21014 – Ataque de replay de tramas del bus CAN en la ECU del automóvil Código del programa simulación de SocketCAN en Python root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid,...
CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack
CVE-2026-23004 – Omisión de autenticación UDS en automoción mediante ataque de repetición Código del programa simulador Python CAN‑UDS root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def...
The_Automotive_Threat_Modeling_Template
Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...
CVE-2026-25278
CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...
CVE-2024-53922
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel...
awesome-connected-things-sec — Updated!
🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. Contents Hardware Attacks Fundamentals Interface Attacks Memory Extraction Side-Channel and Fault Injection PCIe and DMA Attacks Wireless Protocols RF...
CVE-2026-71396 Use of Hard-coded Credentials in Bendix EC80 Brake ECU
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...
CVE-2026-71396
CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...
PT-2026-82779
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...
Zero-Trust Federated Learning for Connected Aftermarket Devices
Connected aftermarket devices extend vehicle diagnostics, repair workflows, and over-the-air software maintenance beyond original equipment manufacturer boundaries, yet their heterogeneous ownership and long service life complicate conventional perimeter security. This paper develops Zero Trust...