Recovering an ECU firmware using disassembler and branches

Introduction

We were asked to conduct a black-box assessment of a fleet-sharing Electronic Control Unit (ECU) to evaluate if an attacker could be able to intercept and alter ciphered commands sent over BLE that could lead to an unauthorized access to the vehicle.

Dump all the things

The first step in this kind of assessment is to conduct a hardware analysis of the device to identify the main chips and dump the firmware.

In our case, the core of the …

access assessment attacker ble box commands control disassembler electronic firmware fleet intercept introduction sharing things unauthorized unauthorized access using vehicle