Lion Cipher Lab
Explore automotive CAN bus security with a simulator (no car required)
- SOC Analyst / Blue Team
- Intermediate
- ~60 min
- Free · no account required
Why it matters
A modern car is a network on wheels: dozens of small computers talking over a shared bus that, by design, trusts every message on it. That same design is used in factories, medical devices, and drones. Feeling — hands-on — how a replayed message with no authentication can move a dashboard is the fastest way to understand why vehicle and OT networks are fragile, and why defenders reach for segmentation, intrusion detection, and message authentication. Automotive security is a real career path, and you can start it tonight with zero hardware.
What you'll learn
- CAN bus fundamentals
- SocketCAN and virtual CAN (vcan)
- reading CAN traffic with candump
- replay attacks and why they work
- automotive network defenses (segmentation, IDS, message authentication)
Steps in this lab
- Read this first — the one rule that keeps this legal and safe
- What a CAN bus actually is (in plain English)
- Install the tools: can-utils and build dependencies
- Create the virtual CAN bus (vcan)
- Get ICSim (the instrument cluster simulator) and build it
- Run the simulator and drive it
- Watch the raw traffic with candump
- Perform (and understand) a replay attack
- Why it worked — and how real vehicles are defended