Automobile Hacking and Security v2.0

Explore how the can protocol simplifies vehicle wiring by connecting ECUs over can high and can low, enabling broadcast messages without a host system and easing component addition or removal.

Learn the can utils framework for communicating with can networks, including can gen, can sniffer, can player, and can send, plus how to set up the virtual car simulator.

Increase the virtual car simulator's realism by using level two difficulty and randomizing IDs. Synchronize the controller with the simulator using the seed value for realistic results and tool access.

Install and configure the caring caribou tool on Kali, set up a virtual car interface, and run cc.py to monitor and simulate CAN traffic for security exploration.

Demonstrate capture and replay attack techniques using the cc.py tool, dumping and replaying can packets to test car-network behavior.

Identify 36 unique arbitration IDs in a scan network with the cc.py listener using reverse sorting. Track appearances to infer active IDs and see which services are running.

Map unique IDs to car actions like door lock, blinker, and acceleration using the fuzzer brute force method, identify the eight-byte data and its byte position, and save results.

Explore the unified diagnostic service (UDS) module, perform discovery to identify client and server IDs, and inspect services like read data by identifier with reset options on a virtual car.

Install and run can analyzer in a docker container, create virtual can interfaces with one click, manage multiple projects, store and export can network traffic, and explore basic fuzzing.

Learn to start the can analyzer via docker from any directory, configure a can0 interface, create a project, and sniff CAN traffic while sending packets and exploring filters.

Shows how to use a CAN analyzer sniffer to capture and replay CAN packets, perform a replay attack, import and send packets, and identify new IDs during vehicle actions.

Discover how the packet searcher identifies a specific action id by performing a recursive split attack on captured packets. It automates data splitting, action testing, and targeted packet replay.

Understand the OBD2 onboard diagnostic system, its error codes and engine, transmission, and system performance details, and locate the 16-pin port under the dashboard.

Identify the vehicle’s OBD2 protocol by analyzing which pins show metallic contact; ISO 157654 is most common, using pins four, five, six, and fourteen.

Develop a universal OBD adapter by soldering wires to a 16-pin mail adapter and using DuPont wires, enabling can high and can low connections across car protocols.

Explore the MCP2515 CAN module, its eight or sixteen megahertz crystals, and the N50 CAN transceiver, then learn Arduino Uno and Nano connections for CAN high and CAN low.

Showcases the MCP2515 module with an 8 megahertz crystal wired to Arduino Uno or Nano for can bus testing, with can high/low to the OBD wire.

Download the arduino-can-utils package and modify four variables in defaults.h and arduino-can-utils.info. Set portrait, pin ten, crystal frequency, and CAN speed; then upload and test with a real car.

Connect the OBD port and wire CAN high and CAN low. Bring up the can0 interface on Kali and test traffic with caribou, preparing for capture and replay attack.

Demonstrate capturing vehicle signals with a dump file and replaying them using a send module to trigger blinkers and brakes, illustrating capture and replay attacks.

Learn to use the listener module to capture unique IDs across a car network, identify almost 43 IDs, verify against blinkers, doors, and brakes, and test IDs with the fuzzer.

Demonstrates a final ecu model using an MCP2515 can bus to connect two Arduino boards, transmitting left and right blinkers, honk, and temperature data over can high and can low.

Identify the required hardware for the ECU model: two Arduino boards, two 2515 modules, two breadboards, jumper wires, and a power bank. Include optional hardware such as DHT11 sensors.

Gather hardware for OLED project: Arduino boards, a 1.3-inch OLED, DHT11 temperature sensor, buzzer, LEDs, buttons; install Adafruit GFX and I2C libraries, then use the address finder for hex address.

Demonstrates building a sender device with the MCP2515 and Arduino, wiring blinkers, horn, and a DHT11 sensor to send CAN frames with IDs 0x42 and 0x36.

Develop and test the receiving device for a CAN bus system using an MCP2515 module, driving left and right blinker LEDs and a horn based on incoming CAN messages.

Connect the device to the ECU model using jumper wires or can high and can low with T-type terminal connectors to sniff can data, noting OBD-II port read-only limits.

Learn to sniff and replay automobile can bus data using can0 in Kali Linux, capturing left and right blinker, horn, and temperature data packets with can dump and can player.

Learn to send specific can packets with the can send tool, looping commands to trigger a horn signal (ID 050 45) on a model and in real cars.