awesome-vehicle-security

Free guide to hacking vehicles from 2014.

Latest version of the Car Hacker's handbook with updated information to hack your own vehicle and learning vehicle security. For a physical copy as well unlimited PDF, MOBI, and EPUB copies of the book, buy it at

An older book from 2005, but still a comprehensive guide on CAN buses and networking in vehicles.

This book guides you through prototyping CAN applications on Arduinos, which can help when working with CAN on your own car.

From 2003, this book fills in gaps in CAN literature and will educate you further on CAN networks and working with embedded systems.

DEFCON 21 talk by Chris Valasek and Charlie Miller on automotive networks.

Overview of CAN, security, and potential intrusion detection approaches at BSides Knoxville 2020

This talk will feature Div0 CSQ’s 3 test benches as they explore more features on Connected vehicles. This was presented in ROOTCON 17 Car Hacking Village.

This talk is for car hackers to learn about modern defense measures being added to ECUs and Vehicle Architectures. This was presented in ROOTCON 17 Car Hacking Village.

Black Hat talk By Charlie Miller and Chris Valasek. Automotive security concerns have gone from the fringe to the mainstream with security researchers showing the susceptibility of the modern vehicle to local and remote attacks. Discussion of vehicle attack surfaces. 2014.

DEFCON 24 talk by Jianhao Liu, Chen Yan, Wenyuan Xu

Digging into an old ECU through an old protocol and disabling a 1997 Subaru Impreza's speed limiter.

Overview of the RollJam rolling code exploitation device.

Using VirtualBox and Kali Linux, you can start car hacking using completely free open-source software and tools, including can-utils, ICSim, ScanTool, Wireshark, and tcpdump

Craig Smith wrote a brief article on working with Metasploit’s HWBrige using ELM327 Bluetooth dongle

A whitepaper from Chris Valasek and IOActive on hacking your car when you don't have a lot of resources at your disposal.

via the SANS Reading Room, Currie's paper analyses the risks and perils of smart vehicle technology.

The ASRG Disclosure Process is to support responsible disclosure when direct communication with the responsible company is unavailable or not responsive.

Coordinated disclosure submissions accepted

No matter which shield is selected you will need your own sniffer. This is implementation of standard Lawicel/SLCAN protocol for Arduino + any MCP CAN Shield to use with many standard CAN bus analysis software packages or SocketCAN

No matter which shield is selected you will need your own sniffer. This is implementation of standard Lawicel/SLCAN protocol for Arduino + any MCP CAN Shield to use with many standard CAN bus analysis software packages or SocketCAN

Open-source core software for the AutoPi dongle, a Raspberry Pi-based OBD-II device for vehicle telematics, CAN bus data collection, and automotive IoT applications.

A tool for reverse-engineering and testing automotive systems. The CANBadger consists of both hardware and software. The main interface is a LPC1768/LPC1769 processor mounted on a custom PCB, which offers two CAN interfaces, SD Card, a blinky LED, some GPIO pins, power supply for peripherals and the ethernet port.

General purpose Controller Area Network swiss army knife and development platform.

The Automotive Security Research Group (ASRG) is a non-profit initiative to promote the development of security solutions for automotive products.

course on Vehicle Hacking methodology.

Community of people interested in car hacking and connecting vehicles to the cloud.

Car Hacking exercises from DEFCON 24.

Global grassroots (eg. volunteer) initiative focused on the intersection of security and human life/public safety issues, such as cars. Participation from security researchers, OEMs, Tier 1s, and many others. Published

NIST, the organization behind the NVD CVE database and modern cryptographic standards, runs a Community of Interest group for Automotive Cybersecurity that seeks to "provide a way for NIST to facilitate the discussions and receive comments and feedback from the automotive industry, academia, and government.".

an awesome list just for CAN Bus-related tools (hardware, software, etc.)

an awesome list just for LIN-Bus related tools (hardware, software, etc.)