Open Source
The following is a list of selected repositories and corresponding code published as free/libre open source software on our github organization.
SELFY VSOC
The SELFY VSOC repository is one of the contributions from the research group in the EU-funded SELFY project. It holds the full Vehicle Security Operations Center (VSOC) stack that consists of the following components:
- ELK stack (elasticsearch, logstash, and kibana)
- VSOC API (HTTP REST)
- Locust test scripts
- Binary scanning tool
DC Charging Station
This Github repository contains glue code in order to create a fully working DC charging station.
In our case we use EcoG/iso15118 for the ISO15118 stack, an EVAcharge SE for powerline communication and a Kratzer Automation battery tester as a HV power supply. We also built a smaller / portable charging station which uses an Elektro Automatik EA-PSB 11000 as a HV power supply.
AUTOSEC Framework
The AUTOSEC Framework holds various attacker scripts to attack and features to interact with modern vehicle systems. It is continually extended with new attacks and updated to support further technologies.
Vehicle logs
Our vehiclelogs github repository contains various CAN logs, PCAP files etc. that we collected from vehicles. Currently the following directories:
- Tesla Model 3: CAN Dumps from all three bus systems
- Volkswagen ID 4: CAN Dumps
- Renault Twizy: CAN dumps
- ESA 5000: Single wire UART dumps of an electric scooter sold by Lidl
- vehicle2grid: High level ISO15118 charging station communication dumps
Exploit to module conversion
This programm is for converting exploit code into a module for an automated penetration testing framwork e.g. the AUTOSEC framework.
Custom monocypher-rs library
The monocypher-rs repository is a minimal, easily expendable rust binding for the Monocypher cryptography library.
It is inspired by Jan Schreib’s monocypher-rs implementation, but several functions were necessary in our application that are not covered by his version. The binding was also created to get familiar with bindgen.
Survey data for publications
The survey-data repository holds the raw survey data from publications of ours.