1
00:00:03,080 --> 00:00:10,780
Now that we've got our Kelly car utilities that can utils and our instrument cluster simulator, I see

2
00:00:10,780 --> 00:00:11,720
Simu installed.

3
00:00:12,050 --> 00:00:15,860
It's time to run our instrument cluster panel panel simulator.

4
00:00:16,310 --> 00:00:20,000
So what we're going to do is start a virtual Khan network.

5
00:00:20,030 --> 00:00:27,170
This is going to set up a virtual car or automotive network, a control area network in our Caleigh

6
00:00:27,170 --> 00:00:28,010
Linux box.

7
00:00:28,490 --> 00:00:31,310
Then we're going to run an icy simulator.

8
00:00:31,520 --> 00:00:35,450
The instrument cluster simulator is going to look just like a dashboard in a car.

9
00:00:35,960 --> 00:00:40,850
Then we'll run a controller and we'll run something called the can sniffer so we can start to listen

10
00:00:40,850 --> 00:00:45,770
to or sniff those packets as they run across the controller area network.

11
00:00:46,220 --> 00:00:49,660
And we will run a couple of these commands with an ampersand after that.

12
00:00:49,740 --> 00:00:53,660
That means that we want it to run and then give us back control or background.

13
00:00:54,080 --> 00:01:00,590
That application so that it can run and still give us control of our terminal window.

14
00:01:00,920 --> 00:01:01,550
So we're going to run.

15
00:01:01,610 --> 00:01:05,090
I see Sam the beacon and the control on V can zero.

16
00:01:05,600 --> 00:01:11,190
So one interesting thing that you should note is we created a new network as soon as we run this set

17
00:01:11,190 --> 00:01:12,490
up B candidate, S.H..

18
00:01:12,920 --> 00:01:16,970
We got an actual network running on our Kalli Linux box.

19
00:01:17,270 --> 00:01:18,680
So let me show you what I mean by that.

20
00:01:18,680 --> 00:01:26,060
And we'll even be able to do a quick IP address or IPA and see a new interface.

21
00:01:26,540 --> 00:01:33,590
So I have already CTD into Bisi set, but I'm going to show that one more time just to help you if you're

22
00:01:33,590 --> 00:01:35,690
coming back into this lab after walking away.

23
00:01:36,080 --> 00:01:38,700
We c.D into the Tilda's slash.

24
00:01:38,750 --> 00:01:40,640
I see Selm folder.

25
00:01:41,000 --> 00:01:42,800
That's our instrument cluster simulator.

26
00:01:42,890 --> 00:01:45,170
Our dashboard of our virtual car.

27
00:01:45,620 --> 00:01:49,140
We're going to run the file setup weekend at S.H..

28
00:01:49,280 --> 00:01:51,290
So we'll say S.H. space setup.

29
00:01:51,740 --> 00:01:54,110
Becan dartez H or just set tab.

30
00:01:55,400 --> 00:02:01,610
And this may ask you for your Kalli your Kelly password.

31
00:02:01,970 --> 00:02:05,140
So remember, on older Kelly, it'll be TDL who are on newer.

32
00:02:05,220 --> 00:02:08,720
Kelly Twenty twenty, twenty dot two and newer.

33
00:02:08,720 --> 00:02:12,260
You're going to enter a KLR Caleigh as your pseudo password.

34
00:02:13,010 --> 00:02:17,270
You can also say pseudo S.H. set up becan, but I think this should have worked just fine.

35
00:02:17,290 --> 00:02:21,410
We're gonna check by saying IP and then either address or just a.

36
00:02:22,940 --> 00:02:27,500
And if you notice, we have a new network in addition to our Ethernet zero, our tendo, the nine,

37
00:02:27,500 --> 00:02:29,750
the Seven Network that we've gotten used to working on.

38
00:02:30,200 --> 00:02:33,320
We've got a new network called V Can Zero.

39
00:02:33,710 --> 00:02:36,560
That is a controller area network link.

40
00:02:37,100 --> 00:02:37,920
So that's nice.

41
00:02:37,940 --> 00:02:40,400
What we're gonna do is run a dot slash.

42
00:02:40,550 --> 00:02:43,250
So in this folder is what dot slash means.

43
00:02:43,640 --> 00:02:43,880
Run.

44
00:02:43,910 --> 00:02:55,730
I see sym on v can zero and then put a space and the ampersand that shift and seven on a U.S. keyboard

45
00:02:56,000 --> 00:02:58,460
and I'll make that just a touch larger so you can see it better.

46
00:02:59,870 --> 00:03:01,280
So if I control Dell.

47
00:03:01,400 --> 00:03:01,850
There we go.

48
00:03:02,540 --> 00:03:03,420
I see Simu.

49
00:03:03,830 --> 00:03:05,690
We can zero ampersand.

50
00:03:06,080 --> 00:03:13,880
What this is going to do is run an instrument cluster simulator right here on our virtual desktop.

51
00:03:14,810 --> 00:03:16,940
So I've got my icey simulator running here.

52
00:03:17,990 --> 00:03:20,210
So it looks just like a regular car dashboard.

53
00:03:20,780 --> 00:03:23,960
I'm going to resize my Kelly.

54
00:03:25,020 --> 00:03:28,650
Terminals so that I can fit a couple of things on the screen at the same time.

55
00:03:29,340 --> 00:03:33,210
So next I'm going to run dot slash controls.

56
00:03:35,600 --> 00:03:36,500
On V can.

57
00:03:37,650 --> 00:03:38,370
Zero.

58
00:03:38,550 --> 00:03:39,660
With an ampersand.

59
00:03:42,050 --> 00:03:48,750
And once we run this, we're actually going to be able to use our virtual controller area network.

60
00:03:50,240 --> 00:03:52,820
So I'm just resizing this down a little bit so I can see everything.

61
00:03:53,180 --> 00:03:59,720
And if I am on my local Kelley box, like I am here on my virtual machine, I can now click the canvas

62
00:03:59,720 --> 00:04:03,560
control panel window, press the up arrow and I can see.

63
00:04:04,610 --> 00:04:05,960
My car accelerate.

64
00:04:06,950 --> 00:04:15,920
If I'm also pressing the right or the left key arrows, you're going to see the turn signals.

65
00:04:16,580 --> 00:04:18,890
And then this is a little bit different.

66
00:04:18,890 --> 00:04:21,860
One, if you see the unlock, right shift and lock, right shift.

67
00:04:22,130 --> 00:04:26,810
You actually have to hold down the right shift and tap the left to lock the doors, hold down the left

68
00:04:26,810 --> 00:04:30,230
shift and tap right to unlock the doors.

69
00:04:30,530 --> 00:04:35,000
Now, depending on your keyboard, like you're going through a virtual lab to get to this, you may

70
00:04:35,000 --> 00:04:36,800
not be able to use both shift keys.

71
00:04:37,220 --> 00:04:39,800
So those the doors may not work for you.

72
00:04:40,100 --> 00:04:41,780
Hold on the right shift.

73
00:04:42,110 --> 00:04:44,210
Click the left called on the left shift.

74
00:04:44,240 --> 00:04:44,960
Click the right.

75
00:04:45,320 --> 00:04:49,400
But as long as you've got access to your arrow keys through whatever keyboard you're using, you should

76
00:04:49,400 --> 00:04:53,570
be able to ramp up the accelerator and turn left or right.

77
00:04:55,000 --> 00:04:57,850
Now, just to give you a quick look ahead, we've got everything working.

78
00:04:58,120 --> 00:05:00,930
But let's go ahead and take a look at this can network.

79
00:05:01,360 --> 00:05:07,450
Now, if we installed the way that we did, you won't be able to run, can sniff or dash C on V can

80
00:05:07,450 --> 00:05:08,490
zero directly.

81
00:05:08,950 --> 00:05:12,970
Well, you'll have to do as c.D back Slye c.D backup home.

82
00:05:13,200 --> 00:05:16,810
Else we're going to c.D and two that can utils.

83
00:05:18,850 --> 00:05:19,150
Yes.

84
00:05:20,140 --> 00:05:22,210
And we're willing to make install.

85
00:05:23,810 --> 00:05:30,530
And, of course, make sure you do a pseudo so pseudo make install pseudo bang bang since I already

86
00:05:30,530 --> 00:05:32,210
there make space install.

87
00:05:33,950 --> 00:05:40,520
And now that we've run the the make install, pseudo make install, we should be able to run that can

88
00:05:40,520 --> 00:05:42,770
sniffer command down to the bottom there.

89
00:05:43,100 --> 00:05:47,510
So let's say can sniffer dash see?

90
00:05:47,540 --> 00:05:48,680
We can zero.

91
00:05:51,680 --> 00:05:52,510
Excellent.

92
00:05:53,500 --> 00:05:59,740
And what were you actually seeing is the data flowing from this controller area network?

93
00:06:01,470 --> 00:06:04,790
And what I'm going to do is shrink the size of this window a little bit.

94
00:06:04,810 --> 00:06:05,890
Control minus.

95
00:06:07,900 --> 00:06:10,000
So that we can fit more of this on there.

96
00:06:10,780 --> 00:06:14,800
So there's not a lot of information going across my version to the network right now.

97
00:06:16,190 --> 00:06:22,030
This is an updated version of the the control panel running through can't sniffer.

98
00:06:22,250 --> 00:06:25,730
But if I press my up arrow, I'm going to see that.

99
00:06:25,730 --> 00:06:31,820
Can I.D. 244 move up if I control.

100
00:06:31,940 --> 00:06:32,570
Let me control.

101
00:06:32,570 --> 00:06:33,920
See to stop that one.

102
00:06:34,430 --> 00:06:37,100
Let's rerun Kane's sniffer with the slightly larger window.

103
00:06:38,030 --> 00:06:40,610
So if I press my left and right turn arrows.

104
00:06:40,850 --> 00:06:42,020
Make sure you click back.

105
00:06:42,140 --> 00:06:43,940
After you run the cat sniffer.

106
00:06:44,330 --> 00:06:46,940
Make sure you click back on your canvas control panel.

107
00:06:47,520 --> 00:06:50,370
Your left and right windows.

108
00:06:51,230 --> 00:06:52,040
Turn signals.

109
00:06:52,640 --> 00:06:57,560
In fact, you might be able to get both to turn on at the same time if you hold one and then release

110
00:06:57,590 --> 00:06:58,610
and grab the other one.

111
00:06:58,790 --> 00:07:05,580
Almost the same time you can see some can I.D. So what you're seeing over here in the small window are

112
00:07:05,660 --> 00:07:08,210
can I.D. and data values.

113
00:07:08,240 --> 00:07:10,010
So idee one eight eight.

114
00:07:10,400 --> 00:07:14,300
Looks like it moved something with our turn signals an 80 to ForFour.

115
00:07:14,330 --> 00:07:17,600
Looks like it moved something with our speedometer.

116
00:07:18,290 --> 00:07:22,100
So this is giving you a little bit of noise from the camera's control panel.

117
00:07:22,100 --> 00:07:25,130
Just some random noise to make it look like the car is idling.

118
00:07:25,760 --> 00:07:31,510
When we come back in the next lesson, we're going to see how to capture some traffic from this control.

119
00:07:32,960 --> 00:07:36,890
This came bus control panel using cance sniffer can dump.

120
00:07:37,220 --> 00:07:43,580
And then we're gonna be able to replay that onto our controller network and make it look like our car

121
00:07:43,700 --> 00:07:46,430
is is being driven all by itself.

122
00:07:46,820 --> 00:07:47,840
So we'll see how to do that.

123
00:07:47,900 --> 00:07:50,750
And then we'll get a bonus lesson that we're creating for you.

124
00:07:51,020 --> 00:07:56,840
On reverse engineering specific commands so that we can manually control our controller network, our

125
00:07:56,840 --> 00:07:58,940
car from the command line.

126
00:07:59,060 --> 00:08:00,170
We'll see how to do that.

127
00:08:00,290 --> 00:08:01,760
Coming up in the next few lessons.

