shipcod3/mazda_getInfo

Stars
158
Rank 237,131 (Top 5 %)
Language
Shell
License
GNU General Publi...
Created over 7 years ago
Updated over 2 years ago

shipcod3/mazda_getInfo

shipcod3

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

mazda_getInfo

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made (known bug in the CMU)

Credits

To Trez of http://mazdatweaks.com/
To @jhaddix for giving me the Car Hackers Handbook :)
http://mazda3revolution.com/forums/2014-2017-mazda-3-skyactiv-audio-electronics/57714-infotainment-project.html

Instructions

Prepare a USB flash drive that is FAT 32
Copy this repo to the root of your USB flash drive
Turn on your car (accessory mode) then insert the flash drive
Wait for like seconds and check your infotainment system

TODO

Planning to compile some plug and play usb to code execution for other cars soon

mySapAdventures

A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters

canTot

quick and dirty canbus h4xing framework

IRC-Bot-Hunters

a collection of Metasploit PoC exploits I wrote for IRC Botnets that allows RCE

TuxLogCleaner

a simple log cleaner for Linux

myFlipperInfrared

some of my learned remotes and IR signals while doing Infrared Testing using Flipper Zero

sploitchits

My collection of exploit development skeletons for fuzzing, overwriting the stack, remote code execution, etc.

Flipper-Collections

A couple of my Flipper Zero payloads and files

honeypy

A simple web app honeypot project which leverages SimpleHTTPServer and has a classic theme from the 80's

cccam-info

A python script that scrapes CCcam information mostly from satellite receivers

sapConfigServlet_rce

checks for SAP ConfigServlet Unauthenticated Remote Code Execution Vulnerability

evilcrow-webRequests

Python scripts for automating web requests in EvilCrowRF

commandsshbotnet

A PoC for command and conquer SSH botnet

Piata-Common-Usernames-and-Passwords

A wordlist I harvested from Piata, a mass SSH scanner

HunterEK_exploit

Arbitrary File Upload Exploit for Hunter Exploit Kit

xstchecker

checks if the website is vulnerable to Cross-Site Tracing (XST)

vulnstrap

A responsive vulnerable web application for practicing your web pentesting skills or for demo purposes.

tools

Tools from ROOTCON Labs

tikzqlmap

automatic pwet grabber exploitation and fingerprinting tool