PowerPress / automotivesec

Home

Welcome to the automotivesec wiki!

• https://github.com/aueb/automotivesec/wiki

Ressources

News

• AutoISAC
• https://the-parallax.com/category/features/
• https://hackaday.com/tag/car-hacking/
• https://arstechnica.com/cars/

News on Twitter

• ASRG https://twitter.com/AutoSecResGroup

Organisations

• Car-Hacking-Village
• ASRG-Meetup-Stuttgart
• ASRG-Meetup-Detroit
• OpenGarages

Events

• GNU-Radio-Conference
• Defcon
• Usenix and related
• CCC and related
• bsidesSTR

Repos TBD

• https://github.com/ps1337/automotive-security-research
• https://github.com/MoatazFarid/Automotive-IDPS
• https://github.com/PhilippMundhenk/Security-Analysis-for-Automotive-Networks-SAAN-
• https://github.com/Bachfischer/CAN-flow
• https://github.com/thephphero/HackMyCar
• Attack Traffic Generation(ATG) tool enable users to explore automotive CAN bus cyber-security rapidly
  • https://github.com/TianTianlove/ATG-python
• https://github.com/eds89/automotivesecuritytesting
  • https://github.com/carla-simulator/carla/releases/tag/0.7.1
• Jon Zeolla https://github.com/JonZeolla/lab-AutomotiveSecurity (check!!)
  • CAN Tutorials https://github.com/JonZeolla/lab-AutomotiveSecurity/tree/master/tutorials/beginner/read-only
  • https://github.com/JonZeolla/Presentations
  • Cutting Through the Buzz: Machine Learning & Artificial Intelligence https://github.com/JonZeolla/Presentations/tree/master/2017-10-20_TRISS
  • https://github.com/JonZeolla/lab-AutomotiveSecurity
• http://www.autosec.org/publications.html
• http://illmatics.com/carhacking.html

Websites

• https://www.car-auto-repair.com/
• https://derschrauberclub.de/

Standards

• SAE J2534
• SAE J1939
• CAN
• LIN

Capture the flag

• RHme
• The Hague
• https://nullcon.net/website/goa-2019/ctf.php

Companies

• Hak5
• Greatscottgadgets (Maker of HackRF)
• Intrepedic (https://www.inrepedics.com)
• Vector
• Riscure (https://www.riscure.com/publications/)

Hacks

Automotive

• Valasek Miller Adventures in Automotive Networks and Control Units 2014

CAN

• Adventures in Automotive Networks and Control Units 2014, https://ioactive.com/pdfs/IOActive_Adventures_in_Automotive_Networks_and_Control_Units.pdf
  • http://illmatics.com/carhacking.html

Keyless Entry

TPMS

Standard Networks

Wifi

• WPA2 Key Reinstallation Attacks
  • https://www.krackattacks.com/
• WifiPhisher – Used for Hacking WPA/WPA2 Security
  • https://latesthackingnews.com/2015/01/05/wifiphisher-new-method-hacking-wpawpa2-security/
• New attack on WPA/WPA2 using PMKID

  • https://hashcat.net/forum/thread-7717.html

    ****Bluetooth****

  • Ubertooth

  • Bluefruit LE Sniffer

    GSM

    GPS

• Using a HackRF to Spoof GPS Navigation in Cars and Divert Drivers
  • https://www.rtl-sdr.com/using-a-hackrf-to-spoof-gps-navigation-in-cars-and-divert-drivers/
• "All Your GPS Are Belong To Us:Towards Stealthy Manipulation of Road Navigation Systems
  • https://twitter.com/sparkfun/status/1025065578166452224?s=12
  • original Paper https://people.cs.vt.edu/gangwang/sec18-gps.pdf
• https://www.darkreading.com/iot/gps-spoof-hits-geneva-motor-show/d/d-id/1334147?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple
  • https://jalopnik.com/theres-something-very-weird-going-on-with-cars-gps-syst-1833138071

Others

Drones

• DJI UAV Drone ID
  • http://blog.kismetwireless.net/2017/
  • Insights Into Drone Protocol Manipulation https://department13.com/insights-drone-protocol-manipulation/1025/

Tools