vmayoral/robot_hacking_manual

What it solves

This project provides an introductory series on robot cybersecurity, aiming to raise awareness about the vulnerabilities of robotic systems and promote a "security-first" approach to robot development. It addresses the lack of comprehensive, step-by-step tutorials and case studies for securing robots against unauthorized tampering and cyber-attacks.

How it works

The Robot Hacking Manual (RHM) is a collection of educational materials, including a PDF manual, online documentation, and a series of detailed write-ups. It covers a wide range of security analysis techniques, including:

• Reconnaissance: Footprinting ROS (Robot Operating System) and ROS 2 systems.
• Vulnerability Research: Static and dynamic analysis of robot software, including the use of robot sanitizers in ROS 2 and GDB for bug hunting.
• Exploitation: Tutorials on buffer overflows, shellcode, and robotics-specific exploits like unauthenticated registration with the ROS Master API.
• Forensics: Capturing memory in Linux-based robots and locating ROS logs.
• Hardening: Studying container technologies for robot security.

Who it’s for

Security researchers, developers, and engineers working with robotics, as well as those interested in learning how to identify and protect robotic systems from cyber threats.

Highlights

• Comprehensive Case Studies: Detailed analysis of specific robots, such as Universal Robots' UR3, Mobile Industrial Robots' MiR100, and TurtleBot 3.
• Broad Technical Scope: Covers both ROS 1 and ROS 2, as well as PX4 autopilot and DDS communication middleware.
• Detailed Tutorials: Step-by-step guides on everything from basic footprinting to advanced exploitation techniques like Return-Oriented Programming (ROP).
• Curated List of Robot Hacks: A non-exhaustive list of real-world vulnerabilities and attacks affecting various home and industrial robots.