Discovery

Overview

Discovery is a feature of VSEC Test designed to discover attack surface(s) via connected interfaces. You can run a discovery scan on the CAN interfaces of any bench connected to VSEC. Ethernet discovery is not available at the moment: a scan on an Ethernet interface finishes with no results. VSEC will display discovered UDS servers, their supported services and some potentially identifying data read from the server. These discovery results can be used to build a test plan to further evaluate a target.

What Discovery scans

On each selected CAN interface, Discovery looks for UDS servers on 11-bit IDs 0x400 to 0x7FF and on 29-bit IDs 0x18DA00F1 to 0x18DA00FF. If the interface is configured for CAN FD, it runs the scan a second time with CAN FD frames and lists those servers separately, marked UDS-FD in the results. An interface configured for classic CAN gets the classic scan only, even when the hardware supports CAN FD.

Discovery does not detect the bus bitrate or sample point; configure the interface with the values from the ECU specification first. An ECU that answers on IDs outside these ranges will not be found, so enter its IDs in the Test Case parameters by hand.

Running Discovery Scanner

1. Sign-in to vsec.blockharbor.io
2. Navigate to Test on the sidebar menu to enter the VSEC Test application and then select the Discovery submenu.
3. Click the Start Discovery button to begin a new discovery.
4. Select the Bench and the interfaces you want the Discovery to run on.
5. Once the discovery is complete, click the view icon ( ) on the corresponding row in the table to view the results. A finished discovery can be restarted or deleted from the icons on its row.

Running Discovery on a Simulation Bench

Discovery can be run against a Simulation Bench instead of a physical Bench. This lets you discover the UDS services running on a virtualised CAN interface without any hardware.

1. Navigate to Test on the sidebar menu and select the Discovery submenu.
2. Click the Start Discovery button to begin a new discovery.
3. In the Bench select box, choose the desired Simulation Bench (e.g., UDS and XCP Starter Challenge).
4. Select the interface to run the Discovery on (e.g., vcan0).
5. Click the Start Discovery button to queue the discovery.

6. To view the results, click on the discovery row or the view icon ( ) on the corresponding row in the table.