{"id":13740174,"url":"https://github.com/shipcod3/canTot","last_synced_at":"2025-05-08T19:35:51.114Z","repository":{"id":45704609,"uuid":"514150017","full_name":"shipcod3/canTot","owner":"shipcod3","description":"quick and dirty canbus h4xing framework","archived":false,"fork":false,"pushed_at":"2024-06-23T13:25:17.000Z","size":88,"stargazers_count":126,"open_issues_count":1,"forks_count":27,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-08-04T04:06:15.213Z","etag":null,"topics":["automotive-security","canbus","car-hacking"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shipcod3.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2022-07-15T05:49:33.000Z","updated_at":"2024-07-22T09:20:31.000Z","dependencies_parsed_at":"2023-02-18T15:00:47.222Z","dependency_job_id":"29ab61ca-bc56-44e5-8a5a-e0cd9088572c","html_url":"https://github.com/shipcod3/canTot","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipcod3%2FcanTot","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipcod3%2FcanTot/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipcod3%2FcanTot/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shipcod3%2FcanTot/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shipcod3","download_url":"https://codeload.github.com/shipcod3/canTot/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":224758293,"owners_count":17364980,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automotive-security","canbus","car-hacking"],"created_at":"2024-08-03T04:00:43.894Z","updated_at":"2024-11-15T09:31:09.630Z","avatar_url":"https://github.com/shipcod3.png","language":"Python","funding_links":["https://www.buymeacoffee.com/shipcod3"],"categories":["Libraries and Tools","Hacking and Reverse Engineering tools"],"sub_categories":["Python"],"readme":"# canTot\r\n\r\ncanTot is a python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and learning python for Car Hacking the easier way. This is not to reinvent the wheel of known CAN fuzzers, car exploration tools like caring caribou, or other great CAN analyzers out there. But to combine all the known vulnerabilities and fun CAN bus hacks in automotive security.\r\n\r\nA project made by [Car Hacking Village Philippines](https://www.facebook.com/chvdotph).\r\n\r\n# Installation\r\n\r\n```\r\ngit clone https://github.com/shipcod3/canTot\r\ncd canTot\r\npip3 install -r requirements.txt\r\n```\r\nNote: Works better with Kali and Ubuntu\r\n\r\n# Sample framework usage:\r\n\r\n```\r\n─$ python3 main.py \r\n\r\n \r\n @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@ @@@@@@ @@@@@@@ \r\n @@@@@@@@ @@@@@@@@ @@@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@@ \r\n !@@ @@! @@@ @@!@!@@@ @@! @@! @@@ @@! \r\n !@! !@! @!@ !@!!@!@! !@! !@! @!@ !@! \r\n !@! @!@!@!@! @!@ !!@! @!! @!@ !@! @!! \r\n !!! !!!@!!!! !@! !!! !!! !@! !!! !!! \r\n :!! !!: !!! !!: !!! !!: !!: !!! !!: \r\n :!: :!: !:! :!: !:! :!: :!: !:! :!: \r\n ::: ::: :: ::: :: :: :: ::::: :: :: \r\n :: :: : : : : :: : : : : : : \r\n \r\n \r\n ███████████ █████ \r\n ░█░░░███░░░█ ░░███ \r\n ██████ ██████ ████████ ░ ░███ ░ ██████ ███████ \r\n ███░░███ ░░░░░███ ░░███░░███ ░███ ███░░███░░░███░ \r\n ░███ ░░░ ███████ ░███ ░███ ░███ ░███ ░███ ░███ \r\n ░███ ███ ███░░███ ░███ ░███ ░███ ░███ ░███ ░███ ███ \r\n ░░██████ ░░████████ ████ █████ █████ ░░██████ ░░█████ \r\n ░░░░░░ ░░░░░░░░ ░░░░ ░░░░░ ░░░░░ ░░░░░░ ░░░░░ \r\n \r\n \r\n \u003e\u003e quick and dirty canbus h4xing framework \r\n \u003e\u003e @shipcod3 \r\n \r\n \r\n \r\n\r\n -=[ 13 uncategorized ]=- \r\n \r\ncantot \u003e show modules \r\n\r\nUncategorized modules\r\n=====================\r\n\r\n Name Path Enabled Description \r\n ---- ---- ------- ----------- \r\n cherokee_kill_brakes . Y This module will bleed all the brakes on the 2014 Jeep Cherokee while the car is moving. This has the result that the brakes will not work during this time and \r\n has significant safety issues, even if it only works if you are driving slowly. \r\n cherokee_kill_engine . Y This module will kill the engine on the 2014 Jeep Cherokee while the car is moving at low speed by killing a particular fuel injector. \r\n cherokee_turn_steering . Y This module will put the Parking Assist Module(PAM) in diagnostic session and send a CAN message to tell the power steering ECU to turn the wheel for the Jeep \r\n Cherokee 2014. \r\n diagnostic_state . Y This module will keep the vehicle in a diagnostic state on loop by sending tester present packet. \r\n ecu_hard_reset . Y This module performs hard reset in the ECU Reset Service Identifier (0x11). \r\n ford_escape_door_ajar_spoof . Y This module will indicate that the door is ajar (open) from the instrument panel despite not opened. \r\n ford_escape_kill_engine . Y This module will kill the engine for Ford Escape 2010 without establishing a diagnostic session and works at any speed. \r\n jeep_wrangler_evicsend . Y This module allows you to display the word Hacked on a 2012 Jeep Wrangler EVIC. \r\n kill_bus . Y This module will perform a known denial of service via the CAN bus called Firehose attack. \r\n malibu_overheat . Y This module will flood temp gauge on a 2006 Malibu. \r\n mazda_ic_mover . Y This module moves the needle of the accelorometer and speedometer of the Mazda 2 instrument cluster. \r\n prius_park_kill_engine . Y This module will kill the fuel to individual or all cylinders in the internal combustion engine of a Toyota Prius 2010 but requires it to be parked. \r\n reset_mileage . Y This module clears diagnostic trouble codes and resets the mileage.\r\n\r\ncantot \u003e use diagnostic_state \r\ncantot (diagnostic_state) \u003e show options \r\n\r\nModule options\r\n==============\r\n\r\n Name Value Required Description \r\n ---- ----- -------- ----------- \r\n ARBID 2015 Y Arbitration ID (Default: 0x7DF) \r\n INTERFACE vcan0 Y CAN interface \r\n\r\ncantot (diagnostic_state) \u003e run \r\n[*] Putting the vehicle in a diagnostic state...\r\nPress Ctrl+C to stop or cancel\r\n```\r\n\r\n## Author\r\nJay Turla\r\n\r\n## If you love canTot you can buy me a coffee to support this project :)\r\n \u003ca href=\"https://www.buymeacoffee.com/shipcod3\" target=\"_blank\"\u003e\u003cimg src=\"https://cdn.buymeacoffee.com/buttons/default-orange.png\" alt=\"Buy Me A Coffee\" height=\"41\" width=\"174\"\u003e\u003c/a\u003e\r\n\r\n## Contributors\r\n- superuserx\r\n\r\n## Credits\r\n- Nikhil Bogam for CVE-2022-26269 and allowing me to port his findings.\r\n- Charlie Miller and Chris Valasek for their [research](https://illmatics.com/carhacking.html) and papers.\r\n- Ian Tabor (mintynet) for his advises and mentorship.\r\n- Car Hacking Village\r\n- Eric Evenchick for pyvit\r\n- Alexandre D'Hondt for sploitkit\r\n- carfucar for canfuzz_sids.py inspiration\r\n- Craig Smith for the Car Hacker's Handbook and hwbridge inspiration\r\n- ps1337's udsSecAccess.py for scanning UDS services using Security Access\r\n- Keen Security Lab of Tencent for their Tesla hacks\r\n- superuserx's fix on logical flaw for uds_sec_access.py\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshipcod3%2FcanTot","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshipcod3%2FcanTot","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshipcod3%2FcanTot/lists"}