PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How I Built a Car In a Box

blog.quarkslab.com | research | #car-hacking | #hardware | #training | #automotive | #ecu | #volkswagen
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Building a Car in a Box: how Quarkslab assembled the VAGBox, a transportable setup of several Volkswagen-group ECUs for car hacking training and demos.
Published
Collected

Related coverage

research · blog.quarkslab.com
Development of a training ECU
How Quarkslab built a low-cost, open-source training ECU (Teensy 3.2, CAN transceiver, sensors and actuators) so car-hacking trainees can attack it freely without risking a real vehicle.
research · blog.quarkslab.com
Bypassing debug password protection on the RH850 family using fault injection
Quarkslab bypasses the 16-byte IDCODE debug password on several Renesas RH850 automotive microcontroller variants using voltage fault injection, enabling firmware extraction in black-box audits.
research · blog.quarkslab.com
Recovering an ECU firmware using disassembler and branches
How Quarkslab recovered erased firmware from a fleet-sharing ECU: using the Capstone disassembler and branch analysis to locate scattered code fragments and enable reverse engineering.
research · blog.quarkslab.com
Reverse engineering of the Nitro OBD2
Reverse engineering the Nitro OBD2 chip-tuning dongle: a teardown shows a minimal circuit only using CAN pins, and firmware analysis examines whether it can really reprogram engines or is a fake.
research · blog.quarkslab.com
Tearing down a car telematic unit (and finding an accident on Facebook)
Quarkslab tore down a second-hand BYD telematic unit (Snapdragon MDM9628, NAND flash), extracted firmware and stored data, then combined forensics with OSINT.
research · blog.quarkslab.com
A Nerd's Life: Weeks of Firmware Teardown to Prove We Were Right
Quarkslab follows up its smartwatch firmware extraction with weeks of reverse engineering through JieLi's firmware format, proving the device's vital-sign measurements cannot be trusted.
Back