Canalyzat0r - Safety Analysis Toolkit For Proprietary Car Protocols

This software projection is a resultant of a Bachelor's thesis created at SCHUTZWERK inwards collaboration amongst Aalen University past times Philipp Schmied.
Please refer to the corresponding blog post for to a greater extent than information.

Why about other CAN tool?

• Built from scratch amongst novel ideas for analysis mechanisms
• Bundles features of many other tools inwards 1 place
• Modular as well as extensible: Read the docs as well as implement your ain analysis mechanisms
• Comfortable analysis using a GUI
• Manage locomote inwards split projects using a database
• Documentation: Read the docs if you lot demand a manual or technical info.

Installing as well as running:

• Run sudo ./install_requirements.sh along amongst sudo -E ./CANalyzat0r.sh. This volition produce a folder called pipenv amongst a pipenv surroundings inwards it.
• Or only purpose the docker version which is recommended at this fourth dimension (Check the README.md file inwards the subdirectory)

For to a greater extent than information, read the HTML or PDF version of the documentation inwards the ./doc/build folder.

Features

• Manage interface configuration (automatic loading of kernel modules, contend physical as well as virtual SocketCAN devices)
• Multi interface support
• Manage your locomote inwards projects. You tin plow over notice also import as well as export them inwards the human readable/editable JSON format
• Logging of all actions
• Graphical sniffing
• Manage findings, dumps as well as known packets per projection

• Easy re-create as well as glue betwixt tabs. Also, you lot tin plow over notice only glue your SocketCAN files into a tabular array that allows pasting

• Threaded Sending, Fuzzing as well as Sniffing 

• Sniffing at the same time

Add multiple analyzing threads on the GUI

Ignore packets when sniffing - Automatically filter unique packets past times ID or information as well as ID

Compare dumps

Allows setting upwards complex setups using solely 1 window

Clean scheme inwards tabs for each analysis task

Binary parcel filtering amongst randomization

Search for activity specific packets using background dissonance filtering

SQLite support

Fuzz as well as alter the values on the fly

Testing It
You tin plow over notice purpose the Instrument Cluster Simulator inwards gild to tinker amongst a virtual CAN jitney without having to attach existent CAN devices to your machine.

Troubleshooting

Empty GUI Windows
Please brand certain that the QT_X11_NO_MITSHM surroundings variable is gear upwards to 1. When using sudo, delight include the -E selection inwards gild to save this surroundings variable equally follows: sudo -E ./CANalyzat0r.sh.

Fixing the GUI style
This application has to endure run equally superuser. Because of a missing configuration, the displayed means tin plow over notice endure gear upwards to an unwanted value when the effective UID is 0. To produce this behaviour, follow these steps:

• Quick way: Execute echo "[QT]\nstyle=CleanLooks" >> /.config/Trolltech.conf
  
• Alternative way:
  
  • Install qt4-qtconfig: sudo apt-get install qt4-qtconfig
  • Run qtconfig-qt4 equally superuser as well as alter the GUI means to CleanLooks or GTK+
• Or purpose the docker container

Download CANalyzat0r