0x90n / awesome-vehicle-security

πŸš— A curated list of resources for learning about vehicle security and car hacking

Home Page:https://jaredmichaelsmith.com/awesome-vehicle-security/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Awesome Vehicle Security

Awesome Codewake

A curated list of awesome resources, books, hardware, software, applications, people to follow, and more cool stuff about vehicle security, car hacking, and tinkering with the functionality of your car.


Inspired by awesome-security, awesome-appsec, and awesome-python.

I would love as much help as I can get. Start contributing!

Check out my blog or follow me on Twitter.


Legend:

  • 🌟: MOST AWESOME.
  • πŸ’°: Costs money. 😞

Table of Contents

Resources to Learn

Articles

Presentations

Books

Blogs

Welcoming contributions!

Websites

Newsletters

Welcoming contributions!

Who to Follow

  • 🌟 Chris Valasek: Security Lead at UberATC
  • 🌟 Charlie Miller: Hacked the first Apple iPhone, now does car security
  • 🌟 Samy Kamkar: Created MySpace Worm, RollJam, OwnStar
  • 🌟 Justin Seitz: Author of Black Hat Python
  • OpenGarages: Vehicle Research Lab
  • Hackaday: Collaborative project hosting for hackers - there are frequently car projects on here

Podcasts and Episodes

Podcasts and podcast episodes that either directly focus on vehicle security or have some episodes on it.

Podcasts

  • 🌟 Security Weekly - Excellent podcast covering all ranges of security, with some episodes focusing portions on vehicle security from cars to drones.
  • TrustedSec Podcast - From the people at TrustedSec, leaders in Social Engineering, their episodes often go into recent vehicle vulnerabilities and exploits.
  • SANS Internet Storm Center - A regular podcast going into the latest vulnerabilities and security news.
  • Security Ledger - A podcast focusing on interviewing security experts about topics related to security.

Episodes

Hardware πŸ’°

Overview of hardware, both open source and proprietary, that you can use when conducting vehicle security research. This article goes through many of the options below.

  • 🌟 Arduino - Arduino's have a number of shields you can attach to connect to CAN-enabled devices.
  • CANtact - "The Open Source Car Tool" designed to help you hack your car. You can buy one or make your own following the guide here.
  • Freematics OBD-II Telematics Kit - Arduino-based OBD-II Bluetooth adapter kit has both an OBD-II device and a data logger, and it comes with GPS, an accelerometer and gyro, and temperature sensors.
  • 🌟 ELM327 - The de facto chipset that's very cheap and can be used to connect to CAN devices.
  • GoodThopter12 - Crafted by a well-known hardware hacker, this board is a general board that can be used for exploration of automotive networks.
  • USB2CAN - Cheap USB to CAN connector that will register a device on linux that you can use to get data from a CAN network.
  • Intrepid Tools - Expensive, but extremely versatile tools specifically designed for reversing CAN and other vehicle communication protocols.
  • Red Pitaya - Replaces expensive measurement tools such as oscilloscopes, signal generators, and spectrum analyzers. Red Pitaya has LabView and Matlab interfaces, and you can write your own tools and applications for it. It even supports extensions for things like Arduino shields.
  • ChipWhisperer - A system for side-channel attacks, such as power analysis and clock glitching.
  • HackerSDR - A Software Defined Radio peripheral capable of transmission or reception of radio signals from 1 MHz to 6 GHz. Designed to enable test and development of modern and next generation radio technologies.

Software

Overview of software, both open source and proprietary, as well as libraries from various programming languages. This article goes through many of the options below.

Applications

Software applications that will help you hack your car, investigate it's signals, and general tinkering with it.

  • 🌟 WireShark - WireShark can be used for reversing CAN communications.
  • Kayak - Java application for CAN bus diagnosis and monitoring.
  • UDSim - GUI tool that can monitor a CAN bus and automatically learn the devices attached to it by watching communications.
  • RomRaider - An open source tuning suite for the Subaru engine control unit that lets you view and log data and tune the ECU.
  • πŸ’° Intrepid Tools - Expensive, but extremely versatile tools specifically designed for reversing CAN and other vehicle communication protocols.
  • O2OO - Works with the ELM327 to record data to a SQLite database for graphing purposes. It also supports reading GPS data. You can connect this to your car and have it map out using Google Maps KML data where you drive.

Libraries and Tools

C

Python

  • 🌟 CANard - A Python framework for Controller Area Network applications.
  • Caring Caribou - Intended to be the nmap of vehicle security
  • c0f - A fingerprinting tool for CAN communications that can be used to find a specific signal on a CAN network when testing interactions with a vehicle.
  • Python-CAN - Python interface to various CAN implementations, including SocketCAN. Allows you to use Python 2.7.x or 3.3.x+ to communicate over CAN networks.

Go

  • CANNiBUS - A Go server that allows a room full of researchers to simultaneously work on the same vehicle, whether for instructional purposes or team reversing sessions.

JavaScript

Companies and Jobs

Companies and jobs working in vehicle security.

  • UberATC - Uber Advanced Technologies Center - info@uberatc.com
  • Tesla - Tesla hires security professionals for a variety of roles, particularly securing their vehicles.
  • Intrepid Control Systems - Embedded security company building tools for reversing vehicles.
  • Rapid7 - Rapid7 does work in information, computer, and embedded security.
  • IOActive - Security consulting firm that does work on pentesting hardware and embedded systems.

Other Awesome Lists

List of lists.

Contributing

Your contributions are always welcome! Please take a look at the contribution guidelines first.

About

πŸš— A curated list of resources for learning about vehicle security and car hacking

https://jaredmichaelsmith.com/awesome-vehicle-security/

License:Creative Commons Zero v1.0 Universal


Languages

Language:Python 100.0%