Vulnerability Analysis
Alissa Knight · 2020
Vulnerability analysis is the necessary step in a penetration test used to identify the weaknesses in the system that one can leverage to affect the confidentiality, integrity, or availability of that system. This information is then an input to the exploitation phase of the penetration test. Vulnerabilities affecting Bluetooth, WiFi, the CAN bus, and GSM all must be considered, making the vulnerability analysis phase much longer than a traditional penetration test of a target web server. This chapter discusses these under two separate categories of vulnerability analysis: active and passive. It explains the numerous vulnerabilities prevalent in the different communication interfaces of an HU and TCU and then walks through the actual vulnerability assessment of a WiFi interface on an HU.