Cantact: An Open Tool for Automative Exploitation
summary
Open-source CANtact hardware provides a low-cost USB-to-CAN interface with jumper-selectable DB9 pinout and full schematics; companion Java cross-platform GUI runs on Linux/Windows/OSX, shows a live trace, one-line-per-ID live view, records candump logs, and replays with canplayer. It implements ISO-TP/UDS diagnostics (seed/key, long frames) and exposes scripting with JavaScript for fuzzing, automated seed/key extraction and simple DOS (spam ID 0). Everything is on GitHub and the hardware and software are demonstrated working on real vehicles and replays.
AI-written summary · about
chapters (17)
- 0:00Intro
- 0:42Automotive Security
- 3:09What is CAN?
- 6:38How CAN Works
- 13:23The Commercial Tools
- 15:43Open Source Tools
- 19:23CANtact Hardware
- 22:29Current Software Limitations
- 23:11Design Goals
- 24:18Design Choices
- 28:53ISOTP
- 31:13Diagnostics
- 32:46Scripting
- 35:57What's Next
- 39:32Emerging Tech
- 44:00Securing Vehicle Networks
- 47:47Questions?
related talks
49mHopping on the CAN Bus
42mCanspy: A Platform for Auditing Can Devices
16mCANdid - An Open-Access Annotated Dataset of Vehicle CAN Bus Traffic
37mAutomatic Automotive Hacking
14mAutoHack: A Physically Verified Multi-Bus CAN Dataset for Intrusion Detection...
32mNo cars were harmed for this talk: Automotive Rust, amateur style
39mCAN Bus in Control, Automotive and Satellites
46mPASTA: Portable Automotive Security Testbed with Adaptability