wllis / canhack Goto Github PK

This repository contains tools and resources for the Yes We CAN project of Canis Labs,

The CANHack toolkit is a proof-of-concept toolkit of different CAN protocol attacks, showing the viability of low-level bit-banging attacks on the CAN protocol itself.

It is provided as generic C source code in two files:

src/
    canhack.c
    canhack.h

It has been built into MicroPython firmware for the RP2040 microcontroller on the Raspberry Pi Pico and will run on the following boards:

• Canis Labs CANHack board
• Canis Labs CANPico board (see )
• Car Hacking Village DEF CON 30 badge

The firmware binary for MicroPython for the CANHack and CANPico boards are located in:

pico/
    micropython/
        firmware-20220805.uf2

The firmware binary for MicroPython for the CHV DEF CON 30 badge is located in:

pico/
    micropython/
        firmware-20220805-CHV-DEFCON30.uf2

Documentation for the MicroPython CANHack API is in:

docs/
    CANHack MicroPython SDK reference manual.pdf

The Canis Labs CTO blog has more information on the CANHack toolkit, including details on how to make a CANHack board using breadboard. There is also a CANHack toolkit demo video that goes into detail on how to use the toolkit from Python, the CAN protocol hacks it includes, and demonstrates it attacking CAN frames in real hardware (the video uses the STM32-based PyBoard but the current MicroPython SDK now runs on the Raspberry Pi Pico).

Python tool for creating and parsing a CAN bitstreams (including creating Janus attack frames):

src/
    canframe.py

A Sigrok protocol decoder for CAN 2.0:

src/
    can2/
        __init__.py
        pd.py

There is a PulseView and can2 demo video showing how to use PulseView as a logic analyzer and seeing CAN frames at a low-level.

A MicroPython SDK for the Raspberry Pi Pico with a CAN API is provided as firmware:

pico/
    micropython/
        firmware-20220805.uf2

See the instructions in:

pico/
    micropython/
        README.txt

for building the firmware (the firmware uses the Canis CAN SDK)

The documentation for the CANPico is in:

docs/
    CANPico MicroPython SDK reference manual.pdf
    CANPico hardware reference manual.pdf

Schematics for the CANHack and CANPico boards are in:

pico/
    pcb/
        CANHack_schm.pdf
        CANPico_pA4_schm.pdf

Kicad source files for the CANHack and CANPico boards are in:

pico/
    pcb/
        CANHack.kicad_pcb
        CANPico.kicad_pcb