LEECH Vehicle Firmware Extraction Tool
The DEF CON Video Team explores LEECH, an open-source automotive toolchain designed to extract and analyze vehicle ECU firmware directly.
Summary
In this technical hardware presentation from the DEF CON 34 Car Hacking Village, researchers demonstrate LEECH, a custom-built hardware platform designed for extracting and analyzing automotive Electronic Control Unit (ECU) firmware. Opening at 00:00, the presenters examine the reverse engineering hurdles posed by locked microcontrollers in modern vehicle architectures.
At 04:00, the session details LEECH's hardware interface capabilities, showing how it interfaces with JTAG, SWD, and UART debugging ports on target circuit boards. The speakers demonstrate targeted fault injection techniques—including precision voltage glitching—to bypass silicon Readout Protection (RDP) and dump raw firmware memory.
Moving to analysis past 08:00 and 12:00, the presenters show how dumped binary images are parsed to extract embedded cryptographic keys, proprietary CAN bus routines, and diagnostic commands, equipping automotive security researchers with vital tooling to audit modern vehicle security. (AI summary — Gemini Flash)
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Village Interviews·7 min
The DEF CON Video Team tours the Car Hacking Village to highlight hands-on test rigs, vehicle telemetry research, and community workshops.
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.