• Automotive Penetration Testing with Scapy
  • Protocols
    • Hands-On
  • System compatibilities
  • CAN Layer
    • Setup
    • CAN Frame
    • CANSocket native
    • CANSocket python-can
    • CANSocket MITM attack with bridge and sniff
    • DBC File Format and CAN Signals
  • CAN Calibration Protocol (CCP)
  • ISOTP
    • ISOTP message
    • ISOTP MITM attack with bridge and sniff
  • ISOTP Sockets
    • ISOTPNativeSocket
    • ISOTPSoftSocket
  • UDS
    • Customization of UDS_RDBI, UDS_WDBI
  • GMLAN
  • SOME/IP and SOME/IP SD messages
    • Creating a SOME/IP message
    • Creating a SOME/IP SD message
  • OBD message
    • Examples:
  • Test-Setup Tutorials
    • Hardware Setup
      • Beagle Bone Black Operating System Setup
      • Dual-CAN Setup
      • ISO-TP Kernel Module Installation
      • CAN-Interface Setup
      • Raspberry Pi SOME/IP setup
    • Software Setup
      • Cannelloni Framework Installation
• Bluetooth
  • What is Bluetooth?
    • Bluetooth sockets (AF_BLUETOOTH)
    • Bluetooth on Linux
  • First steps
    • Verify Bluetooth device
    • Opening a HCI socket
    • Send a control packet
    • Receiving all events
    • Importing and exporting packets
  • Working with Bluetooth Low Energy
    • Discovering nearby devices
      • Enabling discovery mode
      • Collecting advertising reports
      • Filtering advertising reports
    • Setting up advertising
      • AltBeacon
      • Eddystone
      • iBeacon
    • Starting advertising
    • Stopping advertising
    • Resources and references
  • Apple/iBeacon broadcast frames
• HTTP
  • HTTP 1.X
    • About HTTP 1.X
    • HTTP 1.X in Scapy
    • Use Scapy to send/receive HTTP 1.X
  • HTTP 2.X
• PROFINET IO RTC
  • RTC data packet
  • RTC packet
• SCTP
  • Enabling dynamic addressing reconfiguration and chunk authentication capabilities
• TCP
  • Using the kernel’s TCP stack
  • Scapy’s TCP client automaton
  • Use external projects