CAN - aueb/automotivesec GitHub Wiki

Sources

• https://de.wikipedia.org/wiki/Controller_Area_Network

• https://en.wikipedia.org/wiki/CAN_bus

• https://www.can-cia.org/can-knowledge/

• Vector CAN Akademie

  • https://elearning.vector.com/index.php?&wbt_ls_seite_id=504216&root=376493&seite=vl_can_introduction_de

• https://pinoutguide.com/CarElectronics/car_obd2_pinout.shtml

• https://www.hackers-arise.com/single-post/2017/08/04/Automobile-Hacking-Part-1-The-CAN-Protocol

• https://www.csselectronics.com/screen/page/simple-intro-to-can-bus

• https://makezine.com/2016/04/08/car-hacking-tools-trade/

  • Excerpt from the Car Hackers Handbook (http://opengarages.org/handbook/)

• https://github.com/mortedamos/vehicle-hacking/wiki from ASRG-D

• Nissan MITM on CAN Bus @hardwear.io 2019

  • https://media.hardwear.io/electric-vehicle-can-man-in-the-middling/

• https://www.cowfishstudios.com/blog/canned-pi-part1

• http://obdtester.com/downloads

Basics

• https://makezine.com/2016/04/08/car-hacking-tools-trade/
• Hackaday CAN Series
  • https://hackaday.com/2013/10/21/can-hacking-introductions/
  • https://hackaday.com/2013/10/22/can-hacking-the-in-vehicle-network/
  • https://hackaday.com/2013/10/29/can-hacking-protocols/
  • https://hackaday.com/2013/11/05/can-hacking-the-hardware/
• http://www.obd.wiki/can
• Forum https://www.canhack.de/
• https://canb.us/tutorials/Tapping%20into%20a%20bus
• When CAN CANT - Tim Brom and Mitchell Johnson (GRIMM) https://archive.org/details/youtube-oS-6xDc_pP4

Standards

• https://pinoutguide.com/CarElectronics/car_obd2_pinout.shtml
  • Skoda https://pinoutguide.com/CarElectronics/skoda_obd2_diagnostic_pinout.shtml

ISO 11898

• ISO 11898-1:2015 Road vehicles — Controller area network — Part 1: Data link layer and physical signalling
• ISO 11898-2:2016 Road vehicles — Controller area network — Part 2: High-speed medium access unit
• ISO 11898-3:2006 Road vehicles — Controller area network — Part 3: Low-speed, fault-tolerant, medium dependent interface
• ISO 11898-4:2004 Road vehicles — Controller area network — Part 4: Time-triggered communication
• ISO 11898-5:2007 Road vehicles — Controller area network — Part 5: High-speed medium access unit with low-power mode
• ISO 11898-6:2013 Road vehicles — Controller area network — Part 6: High-speed medium access unit with selective wake-up functionality

SAE J2284

• SAE J2284-1:2016 High Speed CAN for Vehicle Applications at 125 kbps
• SAE J2284-2:2016 High Speed CAN for Vehicle Applications at 250 kbps
• SAE J2284-3:2016 High Speed CAN for Vehicle Applications at 500 kbps
• SAE J2284-4:2016 High Speed CAN for Vehicle Applications at 500 kbps with CAN FD Data at 2 Mbps
• SAE J2284-5:2016 High Speed CAN for Vehicle Applications at 500 kbps with CAN FD Data at 5 Mbps

Higher Protocols

• 1992: CiA 201 series (CAN Application Layer)
• 1994: IEC 62026-3 (DeviceNet)
• 1994: SAE J1939 series
• 1994: EN 50325-4 (CANopen)
  • https://www.can-cia.org/canopen/
  • https://www.can-cia.org/services/canopen-vendor-id/
  • https://www.csselectronics.com/screen/page/canopen-tutorial-simple-intro
• 1999: ISO 11992 series
• 2000: IEC 61162-3 (NMEA 2000)
• 2002: ISO 11783 series (Isobus)
• 2004: ISO 15765 series (OBDII/ISO-TP)
• 2007: Arinc 825/826

Links

• https://www.can-cia.org/can-knowledge/hlp/higher-layer-protocols/
• https://learn.sparkfun.com/tutorials/getting-started-with-obd-ii
• https://learn.sparkfun.com/tutorials/can-bus-shield-hookup-guide
• https://hackaday.com/2017/01/04/on-board-diagnostics/
• https://www.mikrocontroller.net/articles/CAN
• CAN Sniffing https://www.canhack.de/viewtopic.php?t=13#5111

On-board diagnostics

• https://en.wikipedia.org/wiki/On-board_diagnostics

OBD2

Fault Codes

• http://wiki.ross-tech.com/wiki/index.php/Category:Fault_Codes

Steering wheel angle

• https://github.com/brendan-w/python-OBD/issues/40
• http://wiki.ross-tech.com/wiki/index.php/VW_Golf_(1K)_Steering_Assist#Channel_009:_Steering_Angle_Sensor
• https://mechanics.stackexchange.com/questions/17634/read-steering-angle-data-in-real-time

Chips

ELM327

• https://area515.org/elm327-hacking/
• https://hackaday.com/2016/03/27/open-source-obd-ii-adapter/
• alternative Firmware https://bitbucket.org/drbobbob/elm-lawicel/src/default/

SN65HVD230

• https://www.waveshare.com/product/SN65HVD230-CAN-Board.htm
• https://www.waveshare.com/wiki/SN65HVD230_CAN_Board
• https://hackaday.com/tag/sn65hvd230/
  • https://github.com/limiter121/esp32-obd2-emulator
• https://forum.arduino.cc/index.php?topic=173216.0
• https://www.mikrocontroller.net/part/SN65HVD230

MCP2551

• https://www.sparkfun.com/products/13262

NXP

• TJA1054A https://www.nxp.com/docs/en/data-sheet/TJA1054A.pdf
• TJF1051High-speed CAN transceiver https://www.nxp.com/docs/en/data-sheet/TJF1051.pdf
• K-Line Interface https://www.mouser.com/datasheet/2/302/MC33660-783676.pdf

Tools

• CANalyze
• CANalyzat0r
• CANUSB
• CANToolz
• CANBadger
• Flashlogic FLXCAN
• USB2CAN
• ValueCan4-1
• VehicleSpy by Intrepid
• Easysync
• Ikalogic SP209 Logic Analyzer
• CANtact
• CANutils
• canb.us and Wireshark https://canb.us/tutorials/Wireshark
• CANiBUS https://github.com/Hive13/CANiBUS/
• Scapy
• Seedstudio CAN-Bus Shield V2
• CANBus Triple
• GreatFET
• EdiabasLib

Links

• https://hackaday.com/2013/10/22/can-hacking-the-in-vehicle-network/
• Cyber-attacks on vehicles
  • http://dn5.ljuska.org/napadi-na-auto-sistem-1.html
  • http://dn5.ljuska.org/cyber-attacks-on-vehicles-2.html
• https://www.can-cia.org/
  • https://www.can-cia.org/can-knowledge/
  • https://www.can-cia.org/groups/specifications/
  • https://www.can-cia.org/services/publications/further-information/information-brochures/
  • https://www.can-cia.org/services/conferences/icc/