Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Troy Hunt on Controlling Nissans troyhunt.com

Troy Hunt goes into controlling Nissan vehicles.

Website troyhunt.com

CAN MITM Bridge by MUXSCAN tindie.com

a tool to MITM CAN messages, allowing easy interaction with your car.

Stalk percona.com

Collect forensic data about MySQL when problems occur.

CORTEX XSOAR paloaltonetworks.com

Paloalto security orchestration, automation and response platform with full Incident lifecycle management and many integrations to enhance automations.

OSForensics osforensics.com

Tool to acquire live memory on 32-bit and 64-bit systems. A dump of an individual process’s memory space or physical memory dump can be done.

Tesla tesla.com

Tesla hires security professionals for a variety of roles, particularly securing their vehicles.

PMDump ntsecurity.nu

Tool that lets you dump the memory contents of a process to a file without stopping the process.

Car Hacking Videos tekeye.uk

A web page with a long list of videos (40+) that are available online related to the topic of car hacking. From a 2007 DEF CON talk on modding engine ECUS and onwards (e.g. the 2017 Keen Security Tesla hack).

Scout2 nccgroup.github.io

Security tool that lets Amazon Web Services administrators assess their environment's security posture.

Intrepid Tools store.intrepidcs.com

Expensive, but extremely versatile tools specifically designed for reversing CAN and other vehicle communication protocols.

Metadefender Cloud metadefender.com

Free threat intelligence platform providing multiscanning, data sanitization and vulnerability assessment of files.

Comprehensive Experimental Analyses of Automotive Attack Surfaces, 2011 static.usenix.org

Introduction to DFIR medium.com

By Scott J. Roberts.

SparkFun CAN-BUS Shield sparkfun.com

Hacking Connected Vehicles with Chris Valasek of IOActive soundcloud.com

Chris Valasek talks about hacking into connected vehicles.

Cyphon medevel.com

Cyphon eliminates the headaches of incident management by streamlining a multitude of related tasks through a single platform. It receives, processes and triages events to provide an all-encompassing solution for your analytic workflow — aggregating data, bundling and…

Security Ledger soundcloud.com

A podcast focusing on interviewing security experts about topics related to security.

MAGNET DumpIt magnetforensics.com

Fast memory acquisition tool for Windows (x86, x64, ARM64). Generate full memory crash dumps of Windows machines.

Car Hacking with Craig Smith softwareengineeringdaily.com

Software Engineering Daily did an amazing episode with Craig Smith, author of the Car Hacking Handbook (above), on hacking into vehicles.

Magnet ACQUIRE magnetforensics.com

ACQUIRE by Magnet Forensics allows various types of disk acquisitions to be performed on Windows, Linux, and OS X as well as mobile operating systems.

Zeekr security.zeekrlife.com

Zeekr and Geely Responsible disclosure program

Developments in Car Hacking sans.org

via the SANS Reading Room, Currie's paper analyses the risks and perils of smart vehicle technology.

Magnet RAM Capture magnetforensics.com

Free imaging tool designed to capture the physical memory of a suspect’s computer. Supports recent versions of Windows.

"Drive It Like You Hacked It" from DEFCON 23 samy.pl

A talk and slides from Samy Kamkar's DEFCON 23/2015 talk that includes hacking garages, exploiting automotive mobile apps, and breaking rolling codes to unlock any vehicle with low cost tools.

Website samy.pl

RomRaider romraider.com

An open source tuning suite for the Subaru engine control unit that lets you view and log data and tune the ECU.

Log Parser Lizard lizard-labs.com

Execute SQL queries against structured log data: server logs, Windows Events, file system, Active Directory, log4net logs, comma/tab separated text, XML or JSON files. Also provides a GUI to Microsoft LogParser 2.2 with powerful UI elements: syntax editor, data grid, chart…

Rinho Telematics rinho.com.ar

GPS trackers with native CAN Bus (J1939/FMS), WiFi fallback for offline data download, and BLE 5.0 sensors. Compatible with Traccar and Wialon.

Event Log Observer lizard-labs.com

View, analyze and monitor events recorded in Microsoft Windows event logs with this GUI tool.

Limacharlie limacharlie.io

Endpoint security platform composed of a collection of small projects all working together that gives you a cross-platform (Windows, OSX, Linux, Android and iOS) low-level environment for managing and pushing additional modules into memory to extend its functionality.

BUSMASTER rbei-etas.github.io

An Open Source tool to simulate, analyze and test data bus systems such as CAN, LIN, FlexRay.

Rapid7 rapid7.com

Rapid7 does work in information, computer, and embedded security.

KAPE kroll.com

Kroll Artifact Parser and Extractor (KAPE) by Eric Zimmerman. A triage tool that finds the most prevalent digital artifacts and then parses them quickly. Great and thorough when time is of the essence.

Python Security pythoncarsecurity.com

A website for browsing and buying python-integrated cars having certain vehicular security features.

SocketCAN python-can.readthedocs.io

Python interface to SocketCAN

Joe Sandbox (Community) joesandbox.com

Joe Sandbox detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux, and iOS for suspicious activities; providing comprehensive and detailed analysis reports.

TrustedSec Podcast podcasts.apple.com

From the people at TrustedSec, leaders in Social Engineering, their episodes often go into recent vehicle vulnerabilities and exploits.

IPASIS ipasis.com

Real-time IP reputation and email validation API for investigating suspicious interactions. Returns an Interaction Trust Score (0-100) combining VPN/proxy/Tor detection with email risk assessment in a single API call.

Researchers tackle autonomous vehicle security phys.org

Texas A&M researchers develop intelligence system prototype.

Website pentestpartners.com

Guymager guymager.sourceforge.net

Free forensic imager for media acquisition on Linux.

PandwaRF pandwarf.com

PandwaRF is a pocket-sized, portable RF analysis tool operating the sub-1 GHz range. It allows the capture, analysis and re-transmission of RF via an Android device or a Linux PC. Capture any data in ASK/OOK/MSK/2-FSK/GFSK modulation from the 300-928 MHz band.

Analysis of an old Subaru Impreza - Subaru Select Monitor v1 (SSM1) p1kachu.pluggi.fr

Digging into an old ECU through an old protocol and disabling a 1997 Subaru Impreza's speed limiter.