Automotive USB Fuzzing: Efficient Methods and Real-World Vulnerabilities

Learn about efficient automotive USB fuzzing techniques in this DEF CON 31 Car Hacking Village presentation. Discover how to perform direct USB fuzzing on vehicles by connecting fuzzers directly to cars, moving beyond traditional inefficient commercial media fuzzing methods that require extensive manual testing. Explore practical approaches to both kernel area and media fuzzing, demonstrated through real-world vulnerability discoveries in vehicles like Volkswagen Jetta, Renault Zoe, and GM Chevrolet Equinox. Master key concepts including USB gadget mode configuration, malformed media file generation, failure detection mechanisms, and kernel driver fuzzing using raw gadget implementations. Follow along with detailed demonstrations and gain insights into testing methodologies that can be applied to actual vehicles, complete with Syzkaller reproduction codes and practical vulnerability examples.