Car Hacking Village·19 min
Ravi Rajput
Introduces a sequence-learning approach that analyzes inter-signal correlations in raw CAN bus payloads to detect stealthy contextual automotive attacks.
automotivecan-busanomaly-detection+2
Car Hacking Village
Car Hacking Village at DEF CON 33 explores automotive cybersecurity, vehicle bus architectures, connected infrastructure, and embedded head units. Talks cover TPMS spoofing, odometer manipulation, dealer API vulnerabilities, and EV charging modem exploitation.
1–24 of 57 talks / 58
Car Hacking Village·24 min
Danilo Erazo
Demonstrates how reverse engineering an automotive real-time operating system uncovered image parser flaws exploitable via a crafted PNG file to backdoor head units.
automotivehardwarertos+2
Car Hacking Village·22 min
Eaton Zveare
Reveals critical API vulnerabilities in a major automotive dealer platform that allowed national admin account creation and remote vehicle command access.
automotiveapi-securityaccess-control-bypass+2
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
automotivecan-busreverse-engineering+2
Car Hacking Village·43 min
Jan Berens · Marcell Szakaly
Discloses vulnerabilities in QCA 7000 HomePlug modems used across CCS and NACS EV charging systems that enable communication hijacking and denial of service.
ev-charginghardwarehardware+2
Car Hacking Village·21 min
Kai Ching Wang · Chiao-Lin Yu
Demonstrates an attack chain starting from passenger public Wi-Fi to breach vehicular routers, hijack on-board units, and manipulate smart bus displays.
automotivewifiiot+2
Car Hacking Village·26 min
Yago Lizarribar
Reveals how unencrypted RF broadcasts from direct Tire Pressure Monitoring Systems (TPMS) enable vehicle tracking and custom message injection to spoof ECUs.
automotivetpmsrf+2
Car Hacking Village·35 min
Bill Demirkapi
Bill Demirkapi uncovers systemic validation flaws in digital signature implementations, allowing attackers to repurpose incompatible certificates to sign untrusted code.
code-signingx509certificates+2
Car Hacking Village·37 min
Martin Petran
Martin Petran explores exploiting edge cases in the CAN bus protocol specification and message metadata fields to induce denial-of-service across embedded ECUs.
can-busautomotivedos+2
Car Hacking Village·38 min
Euntae Jang · Donghyon Jeong · Jonghyuk Song
Presents an in-vehicle USB kernel fuzzing framework directly connected to production vehicles, discovering zero-days across Volkswagen, Renault, GM, and AGL.
automotiveusbfuzzing+2
Car Hacking Village·45 min
Sebastian Köhler · Richard Baker
Demonstrates wireless electromagnetic leakage in EV Combined Charging System (CCS) cables, using SDRs to eavesdrop on power-line communications and disrupt charging.
ev-chargingbrokenwireplc+2
Car Hacking Village·46 min
Ian Tabor · Ken Tindell
Automotive security experts reverse engineer a real-world CAN Injection theft tool disguised as a Bluetooth speaker used to steal a Toyota RAV4.
can-injectionautomotivecar-theft+2
Car Hacking Village·29 min
Wyatt Ford · Alex Reuter
Wyatt Ford and Alex Reuter investigate security weaknesses in Vehicle Diagnostic Adapters (VDAs) used on heavy commercial trucks, exploring firmware updates and attack surfaces.
automotivecan-bushardware+2
Car Hacking Village·40 min
Kevin2600 · Li Swei
Kevin2600 and Li Swei demonstrate bypassing in-vehicle facial recognition and voiceprint biometric systems to authenticate, start engines, and execute hidden commands.
biometricsfacial-recognitionvoiceprint+2
Car Hacking Village·50 min
Kartheek Lade
Kartheek Lade presents CANalyse 2.0, a vehicle network analysis tool featuring automated dataset filtration, SQL-based log querying, and Telegram bot injection.
can-buslog-analysisinjection+2
Car Hacking Village·30 min
Jay Turla
Jay Turla introduces canTot, a modular command-line framework that consolidates automotive exploits, fuzzers, and CAN bus vulnerability modules in Python.
can-buspentestingframework+2
Car Hacking Village·1 hr 5 min
Evadsnibor
Evadsnibor shows how the DEF CON 30 Car Hacking Village badge uses the Raspberry Pi RP2040 microcontroller to generate interactive CAN waveforms and disrupt vehicle buses.
can-busrp2040badge+2
Car Hacking Village·45 min
David Rogers
David Rogers integrates commercial mileage clocking tools and remote braking overrides into an immersive vehicle simulator rig to safely study cyber-physical attacks.
mileage-clockingsimulatorcan-bus+2
Car Hacking Village·30 min
Mohammed Shine
Mohammed Shine uncovers broken access controls in Honda Connect APIs, allowing unauthorized attackers to remotely unlock doors, start engines, and honk horns.
connected-cartelematicsapi-security+2
Car Hacking Village·45 min
Kamel Ghali
Kamel introduces RFCommotion, an open-source auditing tool for testing Bluetooth RFCOMM virtual serial port services attached to vehicle head units and IoT devices.
bluetoothrfcommserial+2
Car Hacking Village·40 min
Ayyapan Rajesh
Ayyapan Rajesh details CVE-2022-27254, demonstrating how unencrypted fixed rolling codes in Honda remote keyless entry systems allow replay and vehicle theft.
remote-keyless-entryrkerolling-codes+2
Car Hacking Village·30 min
Soohwan Oh · Jonghyuk Song · Jeongho Yang
Researchers present smart black-box fuzzing for automotive ECUs, generating protocol-aware UDS CAN testcases and handling recovery without coverage feedback.
automotivefuzzinguds+2
Car Hacking Village·52 min
Jay Turla
Jay Turla shares winning methodologies for automotive bug bashes, providing bug bounty hunters with hardware and firmware preparation blueprints.
bug-bountyautomotivecar-hacking+2
Car Hacking Village·36 min
Don Hatfield
Don Hatfield explores central automotive gateways, explaining how multi-bus routing, translation, and security firewalls protect in-vehicle networks.
automotive-gatewaycan-buslin+2