| #!/usr/bin/env python | |
| # | |
| # Adapted from | |
| # https://github.com/rogerclarkmelbourne/Arduino_STM32/blob/2363e7bf8821067b78571ed16fbe397a541968a0/tools/macosx/src/upload-reset/upload-reset.c#L132 | |
| import time | |
| import argparse | |
| import serial | |
| import os | |
| import sys | |
| import struct | |
| import tempfile | |
| import subprocess | |
| from argparse import ArgumentParser | |
| def decode_binary(input_file): | |
| next_addr = 0 |
Prove it! Send the “brake fluid low” message to cause a spurious driver alert.
Automated embedded software is integrated from multiple sources, using a variety of code languages and practices - even in a single ECU. This creates major security risks where content comes together.
These setup steps are only necessary if you are doing this on your own computer
Prove it! Find the “unlock” message to gain access to the car!
Unlocking the doors through CAN message injection is the "hello world" of car hacking. Different vehicles have varying numbers of CAN buses, and send different messages on those buses. The number of messages sent on the vehicle bus make it seem overwhelming to identify which message will help you achieve your goal, but if you have physical access to a vehicle you can find the right message by:
| #!/bin/bash | |
| # | |
| # requires git and docker to be installed | |
| git clone https://github.com/ReFirmLabs.git -b v2.3.2 $HOME/.local/src | |
| cd $HOME/.local/src/binwalk | |
| docker build -t binwalk:latest . | |
| alias binwalk &> /dev/null | |
| if [ $? -eq 0 ]; then |
| import struct | |
| def single_info(val): | |
| iee1754_val = struct.unpack('>I', struct.pack('>f', val))[0] | |
| exp = (iee1754_val & 0x7F80_0000) >> 23 | |
| frac = iee1754_val & 0x007F_FFFF | |
| result = (2**(exp-127)) * (1+(frac/(2**23))) | |
| print('Single Precision:') |
| import builtins | |
| _old_import = builtins.__import__ | |
| def _test_import(*args, **kwargs): | |
| print('yo!', args, kwargs) | |
| return _old_import(*args, **kwargs) | |
| builtins.__import__ = _test_import | |
| import os | |
| print('done') |
The steps on this askubuntu answer https://askubuntu.com/a/1340029 were almost complete but I had to do a little bit of config file setup with extra instructions from the Arch wiki (https://wiki.archlinux.org/title/PipeWire).
Tested on Ubuntu 21.04+
Steps:
sudo add-apt-repository ppa:pipewire-debian/pipewire-upstream
sudo apt update
| #!/usr/bin/env python | |
| import gc | |
| import os | |
| import sys | |
| import glob | |
| import time | |
| import os.path | |
| import unittest | |
| import unittest.case |
| import builtins | |
| _old_import = builtins.__import__ | |
| def _test_import(*args, **kwargs): | |
| print('before!', args, kwargs) | |
| # args 2 and 3 are dictionaries that have the namespace in them, remove | |
| # evidence of our python crimes | |
| for a in args: | |
| if isinstance(a, dict) and '_old_import' in a: | |
| del a['_old_import'] | |
| if isinstance(a, dict) and '_test_import' in a: |