cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CANToolz

CANToolz alias YACHT Otra Herramienta de Hacking de Automóviles CANToolz es un framework para analizar redes y dispositivos CAN. Proporciona múltiples módulos que pueden encadenarse usando el sistema pipe de CANToolz y ser utilizados por investigadores de seguridad, probadores de seguridad...

IoT-Pentest-devices-and-purpose

Dispositivos IoT para Pentest y su Propósito - Edición 2025 Este documento describe las herramientas y hardware más recientes para pruebas de seguridad IoT en 2025, cubriendo diferentes protocolos y tecnologías. Incluye ataques de vanguardia, vulnerabilidades recién descubiertas y herramientas de...

HydraLINCAN

Escudo HydraLINCAN para HydraBus Escudo de bus CAN y LIN para Hydrabus http://hydrabus.com/ Consulte la Wiki de Hydrabus para más información sobre el uso. https://github.com/hydrabus/hydrafw/wiki/HydraFW-CAN-guide Nueva versión con serigrafía más limpia y fácil de leer. Aquí está el esquema de...

doggie

Descripción general del proyecto Doggie y evilDoggie Doggie es un proyecto modular de código abierto diseñado para construir un adaptador CAN Bus a serial USB, BLE, UART casero. Conecta tu computadora a una red CAN Bus mediante el protocolo slcan CAN sobre Serial para compatibilidad con...

doggie

Doggie and evilDoggie Project Overview Doggie is an open-source, modular project designed to build a DIY CAN Bus to serial adapter USB, BLE, UART. It connects your computer to a CAN Bus network using the slcan protocol CAN over Serial for compatibility with tools like SocketCAN and Python-can. Th...

gallia

Gallia Gallia es un marco de pruebas de penetración extensible centrado en el dominio automotriz. El alcance de la cadena de herramientas es realizar pruebas de penetración desde una sola ECU hasta automóviles completos. Actualmente, el enfoque principal está en la interfaz UDS. Actuando como una...

workshop_firmware_reverse_engineering

Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...

zephyr

.. raw:: html The Zephyr Project is a scalable real-time operating system RTOS supporting multiple hardware architectures, optimized for resource constrained devices, and built with security in mind. The Zephyr OS is based on a small-footprint kernel designed for use on resource-constrained...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – Bypass dell'autenticazione UDS automobilistico tramite attacco di replay Codice del programma simulatore Python CAN‑UDS root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def...

CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

CVE-2026-21014 – Ataque de Repetição de Quadro CAN em ECU Automotiva Código do Programa simulação Python SocketCAN root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def receivecan...

Pwn2Own-Auto-2024-CHARX

Exploit CHARX per Pwn2Own Automotive 2024 Questo exploit è stato inviato con successo contro il Phoenix Contact CHARX SEC-3100 durante il Pwn2Own Automotive 2024. Un post del blog di accompagnamento copre parte del nostro processo di ricerca e i dettagli sulle vulnerabilità trovate, con un post...

The_Automotive_Threat_Modeling_Template

Contesto Un workshop di threat modeling per tecnologie legate all'automotive richiede DFD con elementi personalizzati, minacce su misura e raccomandazioni specifiche. La mancanza di un template specifico per il threat modeling automotive ha portato allo sviluppo dell'Automotive Threat Modeling...

CVE-2026-71396

CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...

CVE-2026-71396 Use of Hard-coded Credentials in Bendix EC80 Brake ECU

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

PT-2026-82779

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2026-25292

The CVE-2026-25292 issue is a memory corruption vulnerability in the fastboot command handler used for audio framework configuration in Automotive Linux OS. The root cause, as described, is processing untrusted user input, leading to memory corruption with high impact on confidentiality, integrit...

CVE-2026-24083 Untrusted Pointer Dereference in Automotive Security

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

CVE-2026-24083

CVE-2026-24083 describes a Memory Corruption in handling IOCTL device driver requests when arguments are invalid. The CVE is associated with Qualcomm devices and shows a Local, Low-Complexity exploit with Privileges Required: Low, and no user interaction, leading to High impact across Confidentia...