NullSec OBD-II

February 27, 2026 ยท View on GitHub

OBD-II CAN ISO 15765 SAE J1979

Advanced OBD-II diagnostic and security research toolkit for automotive penetration testing.

๐Ÿ”ง Features

  • Full OBD-II Protocol Support: All 10 diagnostic modes
  • Multi-Protocol Detection: Auto-detect vehicle protocol
  • PID Scanner: Enumerate supported PIDs
  • DTC Management: Read/clear diagnostic trouble codes
  • Live Data Streaming: Real-time sensor monitoring
  • Security Research: Protocol fuzzing and analysis
  • Custom Commands: Send arbitrary OBD-II requests

๏ฟฝ๏ฟฝ Supported Protocols

ProtocolStandardDescription
CAN 11-bitISO 15765-4High-speed CAN (500 kbps)
CAN 29-bitISO 15765-4Extended addressing
K-LineISO 14230-4KWP2000 over K-Line
K-LineISO 9141-2Legacy protocol
J1850 PWMSAE J1850Ford protocol
J1850 VPWSAE J1850GM protocol

๐Ÿš€ Quick Start

# Install
git clone https://github.com/bad-antics/nullsec-obdii
cd nullsec-obdii
./install.sh

# Scan for vehicle
obdii-scan --interface can0

# Read DTCs
obdii-dtc --interface can0 --read

# Live data monitoring
obdii-live --interface can0 --pid 0x0C,0x0D,0x05

๐Ÿ“Š OBD-II Modes

ModeNameDescription
01Current DataLive sensor data
02Freeze FrameSnapshot at DTC trigger
03Read DTCsStored trouble codes
04Clear DTCsReset MIL and codes
05O2 SensorsOxygen sensor tests
06Test ResultsOn-board monitoring
07Pending DTCsCurrent drive cycle
08ControlActuator tests
09Vehicle InfoVIN, ECU info
0APermanent DTCsCannot be cleared

๐Ÿ”’ Security Features

  • Protocol-aware fuzzing
  • PID enumeration attacks
  • Timing analysis
  • Response fingerprinting
  • ECU identification

๐Ÿ”Œ Hardware Support

  • ELM327 (USB/Bluetooth/WiFi)
  • CANtact / CANable
  • PEAK PCAN-USB
  • Kvaser Leaf Light
  • SocketCAN interfaces
  • Custom J2534 passthru

๐Ÿ“– Documentation

โš ๏ธ Disclaimer

For authorized security research and educational purposes only. Always obtain proper authorization before testing on vehicles you do not own.

๐Ÿ“œ License

MIT License - Part of NullSec Linux v5.0