https://github.com/schutzwerk/CANalyzat0r

Security analysis toolkit for proprietary car protocols
https://github.com/schutzwerk/CANalyzat0r

automotive-security carhacking reverse-engineering

Last synced: 27 days ago
JSON representation

Security analysis toolkit for proprietary car protocols

• Host: GitHub
• URL: https://github.com/schutzwerk/CANalyzat0r
• Owner: schutzwerk
• License: gpl-3.0
• Created: 2018-02-27T13:25:40.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2022-02-21T11:06:07.000Z (almost 3 years ago)
• Last Synced: 2024-11-03T05:32:33.259Z (about 1 month ago)
• Topics: automotive-security, carhacking, reverse-engineering
• Language: Python
• Homepage: https://www.schutzwerk.com/en/43/posts/canalyzat0r/
• Size: 17.7 MB
• Stars: 755
• Watchers: 53
• Forks: 146
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-canbus - CANalyzat0r - Security analysis toolkit for proprietary car protocols. (Hacking and Reverse Engineering tools)
• awesome-hacking-lists - schutzwerk/CANalyzat0r - Security analysis toolkit for proprietary car protocols (Python)

README

        
![Alt text](/.repoResources/mainTab.png?raw=true "CANalyzat0r main tab")

*This software project is a result of a Bachelor's thesis created at [SCHUTZWERK](https://www.schutzwerk.com) in collaboration with [Aalen University](https://www.hs-aalen.de/) by Philipp Schmied ([@CaptnBanana](https://twitter.com/CaptnBanana)).*

*Please refer to the corresponding [blog post](https://www.schutzwerk.com/en/43/posts/canalyzat0r/) for more information.*

# Why another CAN tool?

* Built from scratch with new ideas for analysis mechanisms

* Bundles features of many other tools in one place

* Modular and extensible: Read the docs and implement your own analysis mechanisms

* Comfortable analysis using a GUI

* Manage work in separate projects using a database

* Documentation: Read the docs if you need a manual or technical info.

# Installing and running:

* Run `sudo ./install_requirements.sh` along with `sudo -E ./CANalyzat0r.sh`. This will create a folder called `pipenv` with a `pipenv` environment in it.

* Or just use the docker version which is recommended at this time (Check the `README.md` file in the subdirectory)

For more information, read the HTML or PDF version of the documentation in the `./doc/build` folder.

# Features

* **Now with CAN FD Support**

* Manage interface configuration (automatic loading of kernel modules, manage physical and virtual SocketCAN devices)

* Multi interface support

* Manage your work in projects. You can also import and export them in the human readable/editable JSON format

* Logging of all actions

* Graphical sniffing

* Basic support for UDS fuzzing

* Manage findings, dumps and known packets per project

![Alt text](/.repoResources/demo/knownPackets.gif?raw=true "Recognizing known packets")

* Easy copy and paste between tabs. Also, you can just paste your SocketCAN files into a table that allows pasting

![Alt text](/.repoResources/demo/import.gif?raw=true "Import SocketCAN files")

* Threaded Sending, Fuzzing and Sniffing

![Alt text](/.repoResources/demo/fuzzer-sniffer.gif?raw=true "Fuzzing and Sniffing at the same time")

* Add multiple analyzing threads on the GUI

* Ignore packets when sniffing - Automatically filter unique packets by ID or data and ID

* Compare dumps

* Allows setting up complex setups using only one window

* Clean organization in tabs for each analysis task

* Binary packet filtering with randomization

* Search for action specific packets using background noise filtering

![Alt text](/.repoResources/demo/filter.gif?raw=true "Filter Tab")

* SQLite support

* Fuzz and change the values on the fly

# Working CAN Adapters

In general, all SocketCAN devices should be compatible. CANalyzat0r has been developed and successfully tested in combination with [USB2CAN](https://www.8devices.com/products/usb2can) for regular CAN and [PCAN-USB Pro FD](https://www.peak-system.com/PCAN-USB-Pro-FD.366.0.html?&L=1) for CAN FD.

# Testing It

You can use the [Instrument Cluster Simulator](https://github.com/zombieCraig/ICSim) in order to tinker with a virtual CAN bus without having to attach real CAN devices to your machine.

# Troubleshooting

## Empty GUI Windows

Please make sure that the `QT_X11_NO_MITSHM` environment variable is set to `1`. When using `sudo`, please include the `-E` option in order to preserve this environment variable as follows: `sudo -E ./CANalyzat0r.sh`.

## Fixing the GUI style

This application has to be run as superuser. Because of a missing configuration, the displayed style

can be set to an unwanted value when the effective UID is 0. To fix this behaviour, follow these steps:

* Quick way: Execute `echo "[QT]\nstyle=CleanLooks" >> ~/.config/Trolltech.conf`

* Alternative way:

  * Install qt4-qtconfig: `sudo apt-get install qt4-qtconfig`

  * Run qtconfig-qt4 as superuser and change the GUI style to CleanLooks or GTK+

* Or use the docker container

# License

This project is licensed under the [GPLv3](https://www.gnu.org/licenses/gpl.txt).