awesome-vehicle-security

Free guide to hacking vehicles from 2014. You can also buy the book on Amazon

Latest version of the Car Hacker's handbook with updated information to hack your own vehicle and learning vehicle security. For a physical copy as well unlimited PDF, MOBI, and EPUB copies of the book, buy it at

An older book from 2005, but still a comprehensive guide on CAN buses and networking in vehicles.

This book guides you through prototyping CAN applications on Arduinos, which can help when working with CAN on your own car.

From 2003, this book fills in gaps in CAN literature and will educate you further on CAN networks and working with embedded systems.

DEFCON 21 talk by Chris Valasek and Charlie Miller on automotive networks.

Syscan360 2016 SH talk by Jianhao Liu

Black Hat talk By Charlie Miller and Chris Valasek. Automotive security concerns have gone from the fringe to the mainstream with security researchers showing the susceptibility of the modern vehicle to local and remote attacks. Discussion of vehicle attack surfaces. 2014.

DEFCON 24 talk by Jianhao Liu, Chen Yan, Wenyuan Xu

Bugcrowd LevelUp 2017 by Alan Mond

A web page with a long list of videos (40+) that are available online related to the topic of car hacking. From a 2007 DEF CON talk on modding engine ECUS and onwards (e.g. the 2017 Keen Security Tesla hack).

Digging into an old ECU through an old protocol and disabling a 1997 Subaru Impreza's speed limiter.

Overview of the RollJam rolling code exploitation device.

Using VirtualBox and Kali Linux, you can start car hacking using completely free open-source software and tools, including can-utils, ICSim, ScanTool, Wireshark, and tcpdump

Craig Smith wrote a brief article on working with Metasploit’s HWBrige using ELM327 Bluetooth dongle

A whitepaper from Chris Valasek and IOActive on hacking your car when you don't have a lot of resources at your disposal.

via the SANS Reading Room, Currie's paper analyses the risks and perils of smart vehicle technology.

Coordinated disclosure submissions accepted, paid bounties offered

Coordinated disclosure submissions accepted

No matter which shield is selected you will need your own sniffer. This is implementation of standard Lawicel/SLCAN protocol for Arduino + any MCP CAN Shield to use with many standard CAN bus analysis software packages or SocketCAN

No matter which shield is selected you will need your own sniffer. This is implementation of standard Lawicel/SLCAN protocol for Arduino + any MCP CAN Shield to use with many standard CAN bus analysis software packages or SocketCAN

A tool for reverse-engineering and testing automotive systems. The CANBadger consists of both hardware and software. The main interface is a LPC1768/LPC1769 processor mounted on a custom PCB, which offers two CAN interfaces, SD Card, a blinky LED, some GPIO pins, power supply for peripherals and the ethernet port.

General purpose Controller Area Network swiss army knife and development platform.

A platform giving security auditors to audit CAN devices. It can be used to block, forward or modify CAN frames on the fly autonomously as well as interactively.

Jason Haddix explores major vulnerabilities found in cars.

Software Engineering Daily did an amazing episode with Craig Smith, author of the Car Hacking Handbook (above), on hacking into vehicles.

Geoff Siskind paired up with Craig Smith, author of The Car Hacker’s Handbook, to show us just how easy – or not – it is to hack a car.

Chris Valasek talks about hacking into connected vehicles.

Chris Valasek and Charlie Miller discuss with NPR how they were able to hack into vehicles.

the ISC run a regular podcast going into the latest vulnerabilities and security news.

A security analysis toolkit for proprietary car protocols.

CANToolz is a framework for analysing CAN networks and devices. It is based on several modules which can be assembled in a pipeline.

Expensive, but extremely versatile tools specifically designed for reversing CAN and other vehicle communication protocols.

Java application for CAN bus diagnosis and monitoring.

All-in-one installer/uninstaller for many available Mazda MZD Infotainment System tweaks.