canTot: A Modular CLI Framework for CAN Bus Hacking & Pentesting
Jay Turla introduces canTot, a modular command-line framework that consolidates automotive exploits, fuzzers, and CAN bus vulnerability modules in Python.
Summary
The Need for Unified Automotive Penetration Testing Tools
While penetration testers have established frameworks like Metasploit and Recon-ng, automotive security tools have historically remained fragmented across disjointed scripts.
Introducing the canTot CLI Architecture
Jay Turla presents canTot, an open-source modular framework designed to simplify vehicle penetration testing and Python-based CAN bus development.
Consolidating Known Automotive Exploits and Fuzzers
Turla walks through canTot modules—including CAN frame sniffers, ECU identifier scanners, known CVE exploit modules, and payload injection utilities.
Streamlining Automotive Security Auditing Workflows
The author demonstrates how researchers and hobbyists can easily script custom modules to evaluate connected vehicle ECUs and diagnostic gateways.
Related talks
hardwear.io·39 min
Security researchers examine technical aspects of CANanalyze: a python framework for automotive protocols | Erwan Le Disez | Etienne Charron.
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
Car Hacking Village·46 min
Ian Tabor · Ken Tindell
Automotive security experts reverse engineer a real-world CAN Injection theft tool disguised as a Bluetooth speaker used to steal a Toyota RAV4.