DVWA for Automotive
Damn Vulnerable Vehicle Application (DVVA) is some vehicle application that is damn vulnerable which recompose from real pentest case.
The aim of DVVA is to practice some of the most common vehicle vulnerabilities.
Simulate real vulnerabilities
| Status | Exercise | Target | Linked |
|---|---|---|---|
| β | bosch headunit root | Head Unit | Rooting Bosch lcn2kai Headunit |
| β³ | Tesla ADB Bypass | TBOX | Tesla Telematics Control Unit - ADB Auth Bypass |
| π | SiriusXM IDOR | TSP | SiriusXM IDOR exposed other vehicle token |
| π | Ebbe | Charging Pile | Multiple Vulnerabilities in Bender/Ebee Charge Controller |
| π | GARO | Charging Pile | Multiple Vulnerabilities in GARO Wallbox |
inpired by DVWA