CANtact - An Open Tool for Automotive Exploitation

Explore the world of automotive security and Controller Area Network (CAN) exploitation in this 35-minute conference talk from NorthSec. Dive into the CANtact open-source hardware tool, designed for low-cost CAN to USB conversion and bus access. Learn about the new CANtact software, specifically created for reverse engineering and fuzzing CAN systems. Discover how to view CAN traffic, decode messages, and perform diagnostic actions in a graphical environment. Gain insights into analysis techniques for reverse engineering CAN systems, understand the design goals and choices behind CANtact, and explore topics such as tracing, ISOTP, diagnostics, and scripting. Get a glimpse of emerging technologies in automotive security and participate in a Q&A session to deepen your understanding of this critical field.

Intro
Automotive Security
What is CAN?
How CAN Works
The Commercial Tools
Open Source Tools
Design Goals
Design Choices
Trace
ISOTP
Diagnostics
Scripting
What's Next
Bonus: go-cantact
Emerging Tech
Questions?