How do I flash CanCat firmware to an Arduino?

Use the Arduino IDE or arduino-cli with the provided sketches in the CanCat repository; the Installation section details steps like adding board manager URLs for Macchina M2 and running make commands for compilation.

CanCat vs commercial tools like PCAN or Vector?

CanCat is open-source and ideal for flexible research and scripting, but lacks the polished interfaces, real-time guarantees, and professional support of commercial tools, which are better for production diagnostics.

How to scan for UDS servers on a CAN bus with CanCat?

Use the canmap tool with -sE flag or script the UDS module to send ReadDID requests across arbitration IDs; examples in the UDS section show loops for scanning addresses like 0x700 to 0x7F7.

Can I use CanCat on Windows or macOS?

The Python client should work cross-platform, but serial port handling and hardware support are primarily tested on Linux; setup may require additional drivers or adjustments for non-Linux systems.

How to analyze a saved CanCat capture file?

Run ./CanCat.py -f filename to load the capture without hardware; this allows browsing messages, applying bookmarks, and using analysis functions offline for review or reporting.

What CAN bus speeds does CanCat support?

Supports speeds as allowed by the hardware, typically up to 1 Mbps; set baud rates using commands like setCanBaud with constants such as CAN_125KBPS, though specific limits depend on the transceiver.

Troubleshooting CanCat connection issues?

Ensure the device is not in bootloader mode by unplugging USB, verify the correct serial port (e.g., /dev/ttyACM0), and use ping() to test communication; check firmware flashing steps if problems persist.

CanCat — Open-Source CAN Interaction Tool

What is CanCat?

CanCat is an open-source multi-purpose tool for interacting with Controller Area Networks (CAN), commonly used in vehicles, building automation, and industrial systems. It provides firmware for compatible CAN transceivers and a Python client to capture, transmit, and analyze CAN bus messages, enabling experimentation, diagnostics, and security research.

Target Audience

Security researchers, automotive engineers, reverse engineers, and hobbyists working with CAN bus systems in vehicles, building automation, or embedded devices.

Value Proposition

CanCat offers a flexible, open-source alternative to proprietary CAN tools, with extensible Python scripting, support for multiple hardware platforms, and built-in modules for UDS and CCP protocols, making it ideal for custom analysis and research.

swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...

Use Cases

Best For

Capturing and analyzing CAN bus traffic in vehicles for security research
Reverse engineering automotive ECUs and diagnostic protocols
Performing UDS (Unified Diagnostic Services) diagnostics and scanning
Calibration and data acquisition using CCP (CAN Calibration Protocol)
Setting up CAN-in-the-Middle attacks to isolate devices on the bus
Scripting automated CAN bus scans for ECU and DID discovery

Not Ideal For

Production environments requiring real-time, commercial-grade CAN monitoring with vendor support
Users who need a graphical user interface for quick diagnostics without scripting
Projects demanding out-of-the-box compatibility with a wide range of CAN adapters, such as USB-CAN interfaces
Teams without embedded systems experience or resources for hardware modifications like cutting PCB traces

Pros & Cons

Pros

Hardware Versatility

Supports multiple CAN transceivers including Arduino with SeeedStudio shield, Arduino DUE, and Macchina M2 variants, allowing flexible deployment for different use cases like vehicle or industrial systems.

Advanced Protocol Support

Built-in UDS and CCP modules enable deep diagnostics and calibration, with scriptable functions for tasks like ECU scanning and DID discovery, as shown in the UDS module examples.

Scriptable Automation

Python client allows full scripting and automation, such as scanning arbitration IDs or parsing captures, making it efficient for repetitive security research and reverse engineering tasks.

Offline Capture Analysis

Can analyze saved CAN captures without hardware using the -f flag, enabling post-processing and data review for investigations or training scenarios.

Cons

Steep Setup Complexity

Requires installing Arduino IDE, flashing firmware with specific sketches, and managing Python dependencies, which can be daunting for users unfamiliar with embedded toolchains.

Limited Hardware Ecosystem

Only compatible with a few CAN shields, and setups like CAN-in-the-Middle demand hardware modifications (e.g., cutting PCB traces), restricting accessibility and increasing maintenance overhead.

Sparse Advanced Documentation

The README covers basics but lacks detailed guides for custom implementations or troubleshooting, relying on community knowledge for advanced features like CCP data acquisition.

Frequently Asked Questions

What is CanCat?

Target Audience

Security researchers, automotive engineers, reverse engineers, and hobbyists working with CAN bus systems in vehicles, building automation, or embedded devices.

Value Proposition

Use Cases

Best For

Capturing and analyzing CAN bus traffic in vehicles for security research
Reverse engineering automotive ECUs and diagnostic protocols
Performing UDS (Unified Diagnostic Services) diagnostics and scanning
Calibration and data acquisition using CCP (CAN Calibration Protocol)
Setting up CAN-in-the-Middle attacks to isolate devices on the bus
Scripting automated CAN bus scans for ECU and DID discovery

Not Ideal For

Production environments requiring real-time, commercial-grade CAN monitoring with vendor support
Users who need a graphical user interface for quick diagnostics without scripting
Projects demanding out-of-the-box compatibility with a wide range of CAN adapters, such as USB-CAN interfaces
Teams without embedded systems experience or resources for hardware modifications like cutting PCB traces

Pros & Cons

Pros

Hardware Versatility

Advanced Protocol Support

Built-in UDS and CCP modules enable deep diagnostics and calibration, with scriptable functions for tasks like ECU scanning and DID discovery, as shown in the UDS module examples.

Scriptable Automation

Python client allows full scripting and automation, such as scanning arbitration IDs or parsing captures, making it efficient for repetitive security research and reverse engineering tasks.

Offline Capture Analysis

Can analyze saved CAN captures without hardware using the -f flag, enabling post-processing and data review for investigations or training scenarios.

Cons

Steep Setup Complexity

Requires installing Arduino IDE, flashing firmware with specific sketches, and managing Python dependencies, which can be daunting for users unfamiliar with embedded toolchains.

Limited Hardware Ecosystem

Only compatible with a few CAN shields, and setups like CAN-in-the-Middle demand hardware modifications (e.g., cutting PCB traces), restricting accessibility and increasing maintenance overhead.

Sparse Advanced Documentation

The README covers basics but lacks detailed guides for custom implementations or troubleshooting, relying on community knowledge for advanced features like CCP data acquisition.

Frequently Asked Questions

CanCat

What is CanCat?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?

CanCat

What is CanCat?

Overview

Use Cases

Best For

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions

Related Projects

Found a gem we're missing?