PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Development of a training ECU

blog.quarkslab.com | research | #hardware | #training | #automotive | #ecu | #can-bus | #kicad
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How Quarkslab built a low-cost, open-source training ECU (Teensy 3.2, CAN transceiver, sensors and actuators) so car-hacking trainees can attack it freely without risking a real vehicle.
Published
Collected

Related coverage

research · blog.quarkslab.com
How I Built a Car In a Box
Building a Car in a Box: how Quarkslab assembled the VAGBox, a transportable setup of several Volkswagen-group ECUs for car hacking training and demos.
research · blog.quarkslab.com
Reverse engineering of the Nitro OBD2
Reverse engineering the Nitro OBD2 chip-tuning dongle: a teardown shows a minimal circuit only using CAN pins, and firmware analysis examines whether it can really reprogram engines or is a fake.
research · blog.quarkslab.com
Bypassing debug password protection on the RH850 family using fault injection
Quarkslab bypasses the 16-byte IDCODE debug password on several Renesas RH850 automotive microcontroller variants using voltage fault injection, enabling firmware extraction in black-box audits.
research · blog.quarkslab.com
Recovering an ECU firmware using disassembler and branches
How Quarkslab recovered erased firmware from a fleet-sharing ECU: using the Capstone disassembler and branch analysis to locate scattered code fragments and enable reverse engineering.
research · blog.quarkslab.com
Flash Dumping - Part II
Part 2 of flash dumping: restoring a device after BGA flash removal — microsoldering a DIP8 adapter to the IoT board so the chip can be swapped without repeated desoldering.
research · blog.quarkslab.com
Flash Dumping - Part I
Flash dumping part one: when BGA packaging prevents probing, the chip is desoldered and a custom breakout board is designed with KiCAD to read, modify or intercept embedded device memory.
Back