HydraScan

Dissecto HydraScan is an advanced plugin for dissecto HydraVision that enables full vehicle scans for various purposes, including forensic analysis and security testing. By leveraging HydraProbe Mobile, users can seamlessly connect to a vehicle’s OBD interface and perform full-system assessments via CAN (UDS over CAN) or DoIP (UDS over IP). This allows for in-depth analysis of the vehicle’s electronic control units (ECUs), ensuring that potential vulnerabilities are identified and security measures are thoroughly evaluated. With its automated and systematic scanning approach, HydraScan provides a detailed overview of the vehicle’s communication structure, helping security professionals and forensic analysts detect anomalies, unauthorized modifications, or potential attack vectors.

Features


  • Full Vehicle Scans: Conducts comprehensive security and forensic scans across all electronic control units (ECUs) in a vehicle. 
  • HydraProbe Mobile Integration: Connects seamlessly to a car’s OBD interface, enabling plug-and-play scanning via CAN (UDS over CAN) or DoIP (UDS over IP). 
  • Automated Vulnerability Detection: Identifies security gaps, misconfigurations, and potential attack vectors across the vehicle’s communication infrastructure. 
  • Forensic Analysis Capabilities: Captures detailed system logs, helping investigators analyze anomalies, unauthorized modifications, or cyberattacks. 
  • Customizable Test Cases: Supports the creation and execution of tailored security tests, ensuring flexibility for different assessment needs. 
  • Real-Time Monitoring & Reporting: Provides live status updates and generates detailed security reports within HydraVision’s centralized dashboard. 
  • Compliance & Standard Verification: Ensures adherence to automotive cybersecurity standards such as UNECE R155, ISO 21434 or GB44495 and industry best practices. 
  • Scalable & Remote Accessible: Works as a scalable solution for both single-vehicle assessments and fleet-wide security testing, with full remote access for distributed teams. 
  • Intelligent Data Correlation: Aggregates and analyzes scan data from multiple ECUs, providing a holistic view of the vehicle’s security status. 
  • Seamless CI/CD Integration: Allows integration into Continuous Integration/Continuous Deployment (CI/CD) pipelines, ensuring security is tested throughout the development lifecycle.

Benefits

HydraScan conducts full-system assessments via OBD connection using CAN (UDS over CAN) or DoIP (UDS over IP). This ensures in-depth ECU analysis, enabling the detection of vulnerabilities and thorough evaluation of security measures for robust automotive protection.

With real-time monitoring, detailed system logs, and automated vulnerability detection, HydraScan supports comprehensive forensic investigations by capturing anomalies, tracking unauthorized modifications, and uncovering hidden cyberattacks for enhanced incident response.

HydraScan combines ECU protocol scanning (ISOTP & UDS support) with ECU state mapping to reveal potential attack surfaces through detailed reverse engineering, offering holistic system insights and optimized security evaluations for proactive threat prevention.

Applications

  • Automotive Systems

Operating Systems

  • Windows
  • Ubuntu 22.04 & 20.04
  • Fedora
  • Manjaro