awesome-canbus

Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...

CANBUS ECU Discovery

Discovers ECUs by correlating CAN IDs across sessions, classifying diagnostic ranges, and optionally probing with UDS TesterPresent !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS ECU Discovery - Discovers ECUs via passive traffic analysis and optional UDS probing Author: KittySploit Team...

CANBUS OBD-II Query

Queries OBD-II data such as supported PIDs, VIN, custom PID values, and DTCs !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS OBD-II Query - Sends read-only OBD-II diagnostic queries over a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from...

CANBUS Replay Candidates

Scores buffered CAN messages as replay candidates based on periodicity, payload uniqueness, and event-like behavior !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Replay Candidates - Ranks captured CAN frames as replay-attack candidates Author: KittySploit Team Version: 1.0.0 """ from...

CANBUS Session Info

Displays interface, CAN ID, timing, and message statistics for a CANBUS session !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Session Info - Displays metadata and statistics for a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler...

Dump CAN Messages

Dumps CAN messages from one CANBUS session or sibling sessions to file !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Dumper - Dumps CAN messages from a session to file Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo,...

Inject CAN Message

Injects CAN messages into the bus attack/exploitation !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Injector - Injects CAN messages into the bus Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import printinfo, printsuccess, printerror,...

CANBUS Listener

Listens to CAN bus messages and creates sessions for each detected CAN ID !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import threading import time import json class ModuleListener: """CANBUS Listener - Listens to CAN bus messages and creates sessions""" info = 'name': 'CANBU...

Analyze CAN Messages

Analyzes CAN messages from a CANBUS session, detecting patterns and anomalies !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Message Analyzer - Analyzes CAN messages from a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler import...

EUVD-2016-9443

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-8596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the cspcanprocessframe in cspifcan.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute...

CVE-2023-3725 Potential buffer overflow vulnerability in the Zephyr CANbus subsystem

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem...

CarPunk - The Car Hacking Toolkit

CARPUNK IS VERY SIMILAR TO CANghost, ONLY THE DEFFERENCE IS, IT COMES WITH OPTIONS TO ENABLE OR DISABLE INTERFACE AND BASIC SNIFFING AS EXTRA. IT WORKS ON BOTH SIMULATION & REAL CARS. HAS THE OPTIONS TO RECORD AND PLAY THE CAN PACKETS. NO ANY ARGUMENTS REQUIRED WHEN RUNNING BUT NEED...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2502)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-19535

A flaw was found in the Linux kernel’s implementation of the Peak CANBUS USB device driver. An information leak caused by the device could allow a local attacker to possibly gain private information from uninitialized kernel memory...

Vehicle Telematics Security; getting it right

We spend a LOT of time looking at vehicle telematics security, sometimes on client projects but mostly doing vanilla research on telematics components that we’ve bought ourselves, or investigating our own vehicles. We have a pile of vehicle TCUs here that’s several feet high, plus a couple of...

CVE-2016-8596

Buffer overflow in the cspcanprocessframe in cspifcan.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet...

CVE-2016-8596

Buffer overflow in the cspcanprocessframe in cspifcan.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet...

Buffer overflow

Buffer overflow in the cspcanprocessframe in cspifcan.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet...

CVE-2016-8596

Buffer overflow in the cspcanprocessframe in cspifcan.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet...