Collecting CANs: A Bridge Less Travelled
Pearce Barry revives hardware bridging tools in Metasploit, connecting CAN bus and serial hardware interfaces directly into avionics attack surfaces.
Summary
Revisiting Non-Ethernet Hardware Bridging
While enterprise penetration testing focuses heavily on Ethernet and TCP/IP, avionics and automotive platforms rely primarily on Controller Area Network (CAN) and ARINC serial buses.
Revitalizing the Metasploit Hardware Bridge
Pearce Barry examines the evolution of hardware bridge extensions in Metasploit, illustrating how to route offensive payloads through CAN transceivers and hardware adapters.
Analyzing Aerospace Controller Area Networks
Barry demonstrates packet capture, frame crafting, and command injection across aviation-specific CAN implementations used in general aviation and UAVs.
Building Standardized Hardware Tooling for Aerospace Pentesting
The author shares open-source scripts and hardware configurations to facilitate repeatable security testing on non-Ethernet avionics architectures.
Related talks
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
Car Hacking Village·29 min
Wyatt Ford · Alex Reuter
Wyatt Ford and Alex Reuter investigate security weaknesses in Vehicle Diagnostic Adapters (VDAs) used on heavy commercial trucks, exploring firmware updates and attack surfaces.
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.