Getting Naughty on CAN Bus with the CHV Badge
Evadsnibor shows how the DEF CON 30 Car Hacking Village badge uses the Raspberry Pi RP2040 microcontroller to generate interactive CAN waveforms and disrupt vehicle buses.
Summary
The Hardware Architecture of the DC30 CHV Badge
The DEF CON 30 Car Hacking Village badge is powered by the dual-core ARM Cortex-M0+ Raspberry Pi RP2040 microcontroller paired with dedicated CAN transceivers.
Generating Arbitrary CAN Waveforms with Programmable I/O (PIO)
Evadsnibor demonstrates leveraging the RP2040's unique PIO state machines to synthesize raw physical-layer digital waveforms and inject bus-level bit errors.
Interactive Waveform Manipulation and Network Disruption
The author illustrates how the badge reacts dynamically to network traffic, mutating waveforms in real time based on ECU response frames to disrupt communications.
Unlocking Low-Cost Automotive Hardware Tooling
The presentation highlights the potential of affordable, open-source microcontrollers for advanced automotive physical-layer security research.
Related talks
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
Car Hacking Village·29 min
Wyatt Ford · Alex Reuter
Wyatt Ford and Alex Reuter investigate security weaknesses in Vehicle Diagnostic Adapters (VDAs) used on heavy commercial trucks, exploring firmware updates and attack surfaces.
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.