Hacking my Roommates Car - Linux CAN Bus sniffing

Ғылым және технология

In this video, I take advantage of the OBD2 port on my roommate's Honda Accord to sniff some CAN packets. The CAN bus is used by all electronic control units (ECUs) in a car to send and receive data from other ECUs.
In previous videos, I explain how CAN works, and I show how to set up a virtual machine on your laptop to set up a CAN interface in Linux. I also showed where you can get a CAN to USB converter module.
[OBD2 port cable]
www.amazon.com/dp/B081N7G2BR?...
[CAN to USB Converter]
www.amazon.com/dp/B07P9JGXXB?...

Пікірлер: 51

  • @user-rk9zx3lt8k
    @user-rk9zx3lt8k11 ай бұрын

    you r one of best engineer I have seen on youtube, please keep your video, right now I am learning can knlowdege from you to communicate all motors in my robot arm.

  • @MiniBrothas
    @MiniBrothas9 ай бұрын

    This is great! Exactly what I need to be able to start a car hacking project.

  • @klauszinser
    @klauszinser Жыл бұрын

    As a side issue, the Software Wireshark is also interesting.

  • @adiityamishra
    @adiityamishra3 ай бұрын

    Is it possible to decode can data if we just have the can frame id? If yes can you please guide. Cool video btw

  • @N0sfuratu
    @N0sfuratu11 ай бұрын

    Did you try to send CAN to trigger the wipers / lights? I'd be curious if the system allowed sending messages to those zones/domains.

  • @EV_engineer

    @EV_engineer

    10 ай бұрын

    I did not, I am also curious...

  • @0xbitbybit

    @0xbitbybit

    6 ай бұрын

    Yeah that's what I was hoping to see too, whether you can send or edit those live values? Say to turn the lights on or whatever, now that you know what ones are changing and to what values.

  • @morejelloplease
    @morejelloplease8 ай бұрын

    Here's a new challenge... most vehicles 2020+ have what they call fake engine sounds, even non-bose or "premium" audio systems in cars have fake engine enhancing sounds piped into the audio amplifier. mazda cx5 says they are sent from the head unit tp the bose amplifier via CAN, there's 2 can hi/low wires going into the amp. there is also a pulse width modulation control wire and an audiopilot mic +/- wire. i'm thinking it's not as simple as unplugging the can wires int othe amp, because maybe the amp won't turn on and or function properly. there is a catch, if any of the doors are not closed, the fake audio sound won't get pumped thru the speakers. maybe there's a workaround? currently there is no way to disable to fake engine sound sent to the speakers via mazda software, or a press-and-hold button sequence in the cabin. * I believe PCM stands for powertrain control module. this amp takes signals from the ignition, engine tachometer, and transmission so it knows what gear it's in to send the proper audio track to the speakers. what i'm hearing is a slight delay, almost like the fake sound is a few Hz behind the actual engine frequency at any given RPM and it gives it an unpleasant sound as if something is vibrating or off.

  • @Paavo1991
    @Paavo1991Ай бұрын

    Hi. Did you connected to obd port? If so that means you connected to FCAN I believe and things like doors, wipers or hvac should be part of BCAN which is not available in obd port. Need to check with my Honda becuase I was sure that changing doors position would not be visibile in FCAN so I struggle with BCAN snifffing now (connected to HVAC) but my problem is there are only little traffic on the BCAN bus and nothing happens when I play with doors or windows..

  • @MS-qn7rz
    @MS-qn7rz5 ай бұрын

    I tried doing the exact same process that u did. For some reason, I could not find can0 when I give the ‘ip link ls’ command. I did this after connecting to the obd port of my car. Can you tell me what is that I m doing wrong or is there any pre-requisite that I need I m missing out? It would be a HUGE favor. Thanks

  • @DunOpondo
    @DunOpondo Жыл бұрын

    This is intriguing! Does this mean I can just use Linux to read obd2 codes instead of buying the code readers? If so, do you know how, cause that'd be really helpful 😁

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    I was wondering the same thing. If it’s possible, it would make a cool video!

  • @N0sfuratu

    @N0sfuratu

    11 ай бұрын

    Yes and no. You would need to send OBD PID's over CAN to have them respond with the diagnostic codes. There are some legislated codes (ones that are generic that all OEM's use), but there will be some custom ones that only a certain OEM will use. If they are custom, you will get a number, but not necessarily what the code means.

  • @TheTruth-fb4be
    @TheTruth-fb4be2 ай бұрын

    To reprogram a keyfob, do you need the can bus to be communicating?

  • @hi-ccowboy7983
    @hi-ccowboy79835 ай бұрын

    Do Teslas have the equivalent of an ODB-II port? I know there are videos that show how to extract the data, but it required a dongle and some effort to install it. I'm trying to see how they're able to leave it off if it's a US Federal requirement.

  • @honestlocksmith5428

    @honestlocksmith5428

    11 күн бұрын

    Tesla uses canfd.

  • @redcloud4741
    @redcloud47414 ай бұрын

    thats so sick

  • @farhadkamali2321
    @farhadkamali23213 ай бұрын

    HI I did all the steps but I don't get any information from obd2 port. The car is Hyundai Azera 2019. please guide me. Thank you.

  • @1996_Dude

    @1996_Dude

    3 ай бұрын

    Hello newer hyundai models have "CAN bus gateway" and it blocks the data from OBD port you need to directly splice wires to the required module that you want to read also can i know what are you tring to do ? im curious because i have 2016 azera

  • @naveens1379
    @naveens13793 ай бұрын

    for some reason, when i use cansniffer -c can0 command, i don't see the can messages being dumped. is there something that i'm doing wrong? perhaps wrong bitrate or could you give me any other suggestions to troubleshoot my issue? Thanks a lot in advance

  • @Icebeam47
    @Icebeam479 ай бұрын

    I've been very interested in reverse engineering canbus, its totally unencrypted and wide open. I have coming soon a wifi canbus server that i can hook up to a vehicle. I'd like to do something like sort and log data in a database somewhere as it comes in from the vehicle. I wondered What would happen if i just changed values around and sent that to the vehicle.

  • @honestlocksmith5428

    @honestlocksmith5428

    11 күн бұрын

    Send an airbag deployment code. 😉

  • @williamrawlins9981
    @williamrawlins9981 Жыл бұрын

    So i have exactly the same set up, innomaker usb2can with termination resistor. When i candump into terminal i get nothing. The leds on the immo are all lit up red. I am getting data on the bus though as if i plug in my can interface that came with my standalone ecu the recieve led goes mad. I've checked continuity and all good to the pins.

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    Is the CAN socket UP?

  • @SujarwokoWoko-vb1lq
    @SujarwokoWoko-vb1lq20 күн бұрын

    master where can I buy the tools and software I need to service the speedometer.

  • @Chris-xv7zw
    @Chris-xv7zw10 ай бұрын

    When I do cansniffer can0 -c, I just keep getting can messages scrolling. It doesn't stick to the 27 rows (slots?) like you have. All the IDs just keep scrolling so fast, I can't even tell which IDs I want to focus on for changes to the messages/payload. I also don't see the column headers like "ID" or "DATA". I feel like it's my terminal settings? Any help fixing this would be much appreciated!

  • @kb9mtd-aaronwebb

    @kb9mtd-aaronwebb

    9 ай бұрын

    I think this is because of your terminal. When you open terminal go up top and select terminal and either reset or select one of the choices in the drop down. You can also open a new terminal then push and hold the windows key then an arrow key. I usually use windows right then open another terminal and hit windows left. They should take up half of your whole screen. If you try to resize it'll get wonky again. Just select q to quit cansniffer then exit to close the terminal. Then reopen. Hope this helps.

  • @111chicane
    @111chicane Жыл бұрын

    Are you interested in writing code for PIC or Atmel micro, that will sniff the CAN and give an output only when the car is in Ignition? Its a paid gig, of course.

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    Hi, I’m not looking for more work right now. Thanks for the offer!

  • @davidedgar7338

    @davidedgar7338

    Жыл бұрын

    Oh. Dude who put ev motor in Rx8 has done this already. If you mean you want ghost can from missing sensors or something similar.

  • @VivoJefindo-id4cj
    @VivoJefindo-id4cj3 ай бұрын

    I will try this metode for kobelco excavator.. I hope succes

  • @technics6215
    @technics62158 ай бұрын

    Reading data from unprotected diagnostic interface is not hacking ;) I think it would be hacking if you were able to open the doors or start the engine without key.

  • @snazzfab

    @snazzfab

    7 ай бұрын

    😭

  • @arcowo

    @arcowo

    7 ай бұрын

    hacker: n. [originally, someone who makes furniture with an axe] 1. A person who enjoys exploring the details of programmable systems and how to stretch their capabilities, as opposed to most users, who prefer to learn only the minimum necessary. RFC1392, the Internet Users' Glossary, usefully amplifies this as: A person who delights in having an intimate understanding of the internal workings of a system, computers and computer networks in particular. 2. One who programs enthusiastically (even obsessively) or who enjoys programming rather than just theorizing about programming. 3. A person capable of appreciating hack value. 4. A person who is good at programming quickly. 5. An expert at a particular program, or one who frequently does work using it or on it; as in ‘a Unix hacker’. (Definitions 1 through 5 are correlated, and people who fit them congregate.) 6. An expert or enthusiast of any kind. One might be an astronomy hacker, for example. 7. One who enjoys the intellectual challenge of creatively overcoming or circumventing limitations. 8. [deprecated] A malicious meddler who tries to discover sensitive information by poking around. Hence password hacker, network hacker. The correct term for this sense is cracker. The term ‘hacker’ also tends to connote membership in the global community defined by the net. It also implies that the person described is seen to subscribe to some version of the hacker ethic. It is better to be described as a hacker by others than to describe oneself that way. Hackers consider themselves something of an elite (a meritocracy based on ability), though one to which new members are gladly welcome. There is thus a certain ego satisfaction to be had in identifying yourself as a hacker (but if you claim to be one and are not, you'll quickly be labeled bogus). See also geek, wannabee. This term seems to have been first adopted as a badge in the 1960s by the hacker culture surrounding TMRC and the MIT AI Lab. We have a report that it was used in a sense close to this entry's by teenage radio hams and electronics tinkerers in the mid-1950s. From catb.org

  • @AmineOnline

    @AmineOnline

    3 ай бұрын

    You are wrong sniffing is a real thing

  • @joshuasalcedo3630
    @joshuasalcedo3630 Жыл бұрын

    How is a hacked vehicle repaired? Who would fix it or where would i start. Ty for any feedback

  • @ColeUmland13

    @ColeUmland13

    Жыл бұрын

    just unplug the OBD cable i guess

  • @EV_engineer

    @EV_engineer

    11 ай бұрын

    In this particular case, the vehicle is fine. If you suspect some ECUs in a car are infected, the manufacturer would probably need to reflash the firmware and wipe the flash memory.

  • @yuvanthik3254
    @yuvanthik3254 Жыл бұрын

    can we able to retransmit the can messages to the car itself using cansend command..

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    That’s a good question 🧐, my roommate was pretty explicit though when he gave me read-only permission to his car

  • @yuvanthik3254

    @yuvanthik3254

    Жыл бұрын

    @@EV_engineer Can we transmit the can messages using the hardware you used in the video that's can2usb.

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    @@yuvanthik3254 Yes

  • @maalonszuman491
    @maalonszuman491 Жыл бұрын

    Great video is it possible to drive the car ?

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    I assume you mean drive the car and log the CAN signals? Yea that’s doable

  • @u.w.6001
    @u.w.60018 ай бұрын

    Hacking ?!? you simply show the CAN Frames on the BUS - hacking is different...

  • @mohammedshine2372
    @mohammedshine2372 Жыл бұрын

    Can you share the links to purchase these devices

  • @EV_engineer

    @EV_engineer

    Жыл бұрын

    Sure! Updated the description

  • @kb9mtd-aaronwebb

    @kb9mtd-aaronwebb

    9 ай бұрын

    ​@@EV_engineerhopefully you put in affiliate links! I just purchased via your links! Thanks for the video!

  • @chrisman2598
    @chrisman2598Ай бұрын

    Why use a vm ?

  • @thghho
    @thghho8 ай бұрын

    Hi, Great job, will you be interested to complete a small project for USD6,000?

  • @rafaeltavares6928
    @rafaeltavares69288 ай бұрын

    Dude. Just because you can post something online, it's doesn't mean you should.

Келесі