48 matches found
CANToolz
CANToolz 又名 YACHT（Yet Another Car Hacking Tool） CANToolz 是一个用于分析 CAN 网络和设备的框架。它提供多个模块，可通过 CANToolz 的 pipe 系统链式使用，供安全研究人员、汽车/OEM 安全测试人员在黑盒分析中使用。 CANToolz 可用于 ECU 发现、中间人测试、模糊测试、暴力破解、扫描或研发、测试和验证。通过新模块可以轻松实现更多功能。 已有许多可用于 CAN 分析的工具，包括 Charlie Miller 和 Chris Valasek 的工具、Craig Smith 的 UDS/CAN...
doggie
Doggie 和 evilDoggie 项目概述 Doggie 是一个开源、模块化项目，旨在构建一个 DIY CAN 总线到串行适配器（USB、BLE、UART）。它使用 slcan 协议（CAN over Serial）将计算机连接到 CAN 总线网络，以兼容 SocketCAN 和 Python-can 等工具。该项目强调模块化，支持多种微控制器（例如 RP2040、STM32F103C8、ESP32）和 CAN 控制器（内置或 MCP2515）。 evilDoggie 是 Doggie 的攻击性固件变体，专为汽车安全研究和底层 CAN...
doggie_workshop
Simulador de Automóvil del Taller EvilDoggie Presentación del Proyecto ¡Bienvenido al repositorio del Simulador de Automóvil del Taller EvilDoggie! Esta herramienta replica el entorno CAN Bus del automóvil utilizado en la sesión de Black Hat Arsenal 2025. Desarrollado por Faraday Security, el...
IoT-Pentest-devices-and-purpose
IoT 渗透测试设备及其用途 - 2025 版 本文档概述了 2025 年用于 IoT 安全测试的最新工具和硬件，涵盖了不同的协议和技术。它包括前沿攻击、新发现的漏洞，以及功能增强的更新版硬件和软件工具。 目录 蓝牙 Zigbee Z-Wave WiFi 硬件 侧信道攻击 SCA 汽车安全 射频 NFC 和 RFID 2025 年最新漏洞 AI 增强安全测试 蓝牙 软件工具| 硬件工具| 用途| 2025 年更新 ---|---|---|--- BrakTooth PoC 增强版| ESP32-WROVER| 测试蓝牙漏洞（CVE-2021-28139 及其变种）| 增强的利用能力，更广...
Zero-Trust Federated Learning for Connected Aftermarket Devices
Connected aftermarket devices extend vehicle diagnostics, repair workflows, and over-the-air software maintenance beyond original equipment manufacturer boundaries, yet their heterogeneous ownership and long service life complicate conventional perimeter security. This paper develops Zero Trust...
CVE-2026-24083 Untrusted Pointer Dereference in Automotive Security
Memory Corruption while processing IOCTL device driver requests with invalid arguments...
CVE-2026-24083
CVE-2026-24083 describes a Memory Corruption in handling IOCTL device driver requests when arguments are invalid. The CVE is associated with Qualcomm devices and shows a Local, Low-Complexity exploit with Privileges Required: Low, and no user interaction, leading to High impact across Confidentia...
Millions of cars could be tracked and unlocked by a hidden security flaw
A car alarm vendor's coding mistake has left millions of vehicles vulnerable to theft and location tracking. Thanks to the way dealers sell car alarms, many affected drivers don't even know they have one installed. The device is the KARR Security System, a Bluetooth-enabled aftermarket alarm buil...
vehicle-subsystem-security-assessment
🚗 End-to-end security assessment of vehicle subsystems ! Me...
CVE-2025-32063
There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and as a result, the following developer features will be activated: the disabled firewall and the launched SSH server...
CVE-2022-33216
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file...
CVE-2022-33307
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...
Android Automotive OS Update Bulletin—January 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2026-01-05 or later from the January 2026 Android Security Bulletin in addition to all issues in thi...
EUVD-2018-17644
Malware in sbrugna...
EUVD-2017-17238
Malware in sbrugna...
EUVD-2017-9453
Malware in sbrugna...
Enhancing Automotive Security with a Hybrid Approach Towards Universal Intrusion Detection System
Security measures are essential in the automotive industry to detect intrusions in-vehicle networks. However, developing a one-size-fits-all Intrusion Detection System IDS is challenging because each vehicle has unique data profiles. This is due to the complex and dynamic nature of the data...
EUVD-2022-30368
Malicious code in bioql PyPI...