Let's do a quick review and see how we set up this really cool simulated controller area network, the
simulated car network that runs just like a real network in your own automobile, can utilize an ICBM,
made the whole thing possible.
We can run a real controller that looks like a PlayStation controller down here to run using either
the keyboard or a real USB controller to drive a virtual car.
And we can see on the instrument cluster simulator, the icy simulator, the speed we can see the doors
lock and unlock.
We can see the signals turned on and off.
And then we could even see the network packages that came by and we saw how to capture and replay those.
Well, let's go back through how we made that happen.
First of all, we had to install a few dependencies that meant that there were some libraries, that
this package depended on the live SDL, too, and then SDL to image.
Then we had to get the can utilize.
Those are the controller area network utilities.
That's what led us set up that virtual Khan network or the V can zero on our Linux computer.
Then we used GitHub for the first time, so we used Git to grab some really cool open source software
from Zombi Craig.
That's Craig Smith and the team at Open Garages.
Doug, the I simulator of the instrument cluster simulator gives us a controller and a dashboard simulator
to let us drive a virtual car to practice car hacking safely.
Then we didn't have to really compile the icy SIM tools using make.
We just could CDN and use the DOT controls and the dot ICSOM folders, files, programs that were already
in there.
But I'm going to record a bonus section that was really popular in our previous two years of the National
Cyber Warriors Academy, where we hack the car hacking software and we'll learn to use make to recompile.
I'll do that right after this review lesson here.
But we are able to do an LS inside the ICC directory and we saw two new program files, ICSOM and controls.
Then to start our virtual kin network.
Any time you restart your computer, you'll have to reload this Vikan module into your Linux kernel.
That's with the mod probe Vikan and notice that's just Vuksanovic in zero.
They're just Volcan because we're loading the module that lets us do virtual controller area network
simulating on our computer.
Then we use message to make sure that it was actually in the kernel history.
So we displayed those messages.
IP link add dev V can zero type V can that added a new device called V can zero of Type V can.
So we set up a network and then we turn or connected to that network or turned it on by saying IP link
set up the can zero we were able to run can sniff around.
In the beginning there was nothing running across that network.
But as soon as we loaded the icy simulator and the controls from our I see SIM folder, we were able
to run a real controller area network simulator and see that traffic flow by.
And we could see the packets colored different colors because that actually flag the red ones had changed
and the others are staying the same.
And remember, we had to use Slash because we were running these files locally from that one folder
we had and added this system to our path yet for our show.
So we were able to do a car replay attack.
That's a very common hack on networks and on devices like cars, even your door locks in your home.
A replay attack is a pretty common way to test your security.
So if you have a Bluetooth lock, you can use a Bluetooth packet, sniffer and wireless device or laptop
computer and you can listen to those packets as you press your door key unlock if you have one of those
Bluetooth unlocks or when you send the signal from your cell phone.
So if you're using a Bluetooth sniffer, you can sniff just like we used a can sniffer to sniff from
the can network.
Then you can replay that and see if it unlocks your front door.
Unfortunately, there are some locks that came out early on that you could do that with.
Same thing for a garage door opener in the old days, you could just listen using a simple software
defined radio to somebody, press their garage door opener or your or your car lock and unlock from
your key fob.
And somebody could replay that same signal and unlock a door, open a garage door, etc..
So replay attacks are really common thing that we like to try.
And in this case, it worked beautifully.
We could do everything that we could do from the can dump.
So everything we did while we were capturing those packets and logging them with candy dash elv on becan
zero, like pressing the accelerator, unlocking the doors, turning the turn lights, the turn signals
on left and right.
All of those things were shown and replayed when we replayed that same packet file on our can player.
So when we did Candombe Dash LMB can road.
Added, this new file can dump it a long time stamp backlog, and we just had to replay the capture
commands with can player space dashi for an input file, can add up and notice we didn't have to use
becan zero there because we were replaying on the same network that we recorded and on.
If you wanted to record from your Vikan zero and play out over one of those serial connections to a
car, Acel can zero.
For example, your serial can if you plug in a real USB to can device, then you would just say SLK
in zero equals V zero so that you can replay what was originally designed or captured on the can zero
over the serial can connection.
Well, these are some exciting hacking tools and it's just scratching the surface of car hacking.
But if you can understand how to do this, you can do some important things to test your own car and
maybe even replay whether you want to be able to unlock your doors even when your door locks are not
working or the control panel on your door is not working.
Roll down your windows, turn on your stereo, try sniffing and do it responsibly, only on a car that
you own.
But like I mentioned, we can capture and replay single events.
So if your car windows stop working, all of a sudden you can try going to a friend's car that has the
same kind of automobile and just capture that signal when you lower the windows and then save that as
one.
To capture that signal when you raise the windows is another.
And you can plug into your controller area network using a 20 to 40 dollar cable and your laptop computer
and you can control your windows once again.
So some really cool things are possible.
Once you understand how to use this, it won't work on every car the same.
And you do have to capture the the traffic so that you can start to understand it, but can dump can
player, can sniffer will allow you to do that pretty well.
Now, coming up in this bonus lesson, what I want to do for you show you a really cool lesson that
we did with our students in 2016 and 2017 for the National Cyber Warriors Academy.
We are going to hack the car hacking software.
We're actually going to remake that ICSOM file and make some edits so that we can take this speedometer
instead of just stopping at I think it stopped at one hundred miles per hour.
We're going to be able to push that all the way up to 300 miles per hour.
We're going to peg it all the way around.
So that was a fun lesson.
Plus, it shows some really cool skills with editing some open source software, editing the C files
that we downloaded from Excel, from GitHub, and then making use in the new compiler and the make utility
so that we can remake or recompile our car hacking simulation software.
So we're going to hack the car hacking software.
We'll see that as a bonus lesson coming up next.