# Gallia | Extendable Pentesting Framework

**URL:** <https://onehack.st/t/gallia-extendable-pentesting-framework/220570>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, hacking\
**Created:** [June 30, 2022, 2:29pm UTC](https://onehack.st/t/gallia-extendable-pentesting-framework/220570 "2022-06-30T14:29:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [June 30, 2022, 2:29pm UTC](https://onehack.st/t/gallia-extendable-pentesting-framework/220570/1 "2022-06-30T14:29:53Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/b/4/b41a6876e0e88d7516811c5022f38187b3d1305a.png)

[![docs](https://camo.githubusercontent.com/d36e71420e063383300ceb4ea0d0eafb1900aa6cbbce4095ad835e463f1ad3c4/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2d646f63732d677265656e)](https://fraunhofer-aisec.github.io/gallia) [![PyPI - Python Version](https://camo.githubusercontent.com/98a021b52630f536b5abecc4eaf5508d512ba0a9611ace60b3161fc1ea3a4657/68747470733a2f2f696d672e736869656c64732e696f2f707970692f707976657273696f6e732f67616c6c6961)](https://pypi.python.org/pypi/gallia/) [![PyPI - License](https://camo.githubusercontent.com/962563072780f0c19d3e976ed93b294de3ae28a870e875403d5aded7b2837e88/68747470733a2f2f696d672e736869656c64732e696f2f707970692f6c2f67616c6c6961)](https://www.apache.org/licenses/LICENSE-2.0.html) [![PyPI](https://camo.githubusercontent.com/86c85b141ab6fc65ebacb2e7b1471f477329697cdc8825ee79ddb661b6051e10/68747470733a2f2f696d672e736869656c64732e696f2f707970692f762f67616c6c6961)](https://pypi.python.org/pypi/gallia/)

Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the [UDS](https://www.iso.org/standard/72439.html) interface. Taking advantage of this modular design, the [logging and archiving](https://fraunhofer-aisec.github.io/gallia/penlog.7.html) functionality was developed separately. Acting as a generic interface, the logging functionality implements reproducible tests and enables post-processing tasks. The [rendered documentation](https://fraunhofer-aisec.github.io/gallia) is available via Github Pages.

Keep in mind that this project is intended for research and development usage only! Inappropriate usage might cause irreversible damage to the device under test. We do not take any responsibility for damage caused by the usage of this tool.

## Quickstart

See the [setup instructions](https://fraunhofer-aisec.github.io/gallia/setup.html).

```auto
$ gallia simple-dtc --target "isotp://can0?src_addr=0x123&dst_addr=0x312&tx_padding=0xaa&rx_padding=0xaa" read

```

For specifying the `--target` argument see the [transports documentation](https://fraunhofer-aisec.github.io/gallia/transports.html).

## Acknowledgments

This work was partly funded by the German Federal Ministry of Education and Research (BMBF) as part of the [SecForCARs](https://www.secforcars.de/) project (grant no. 16KIS0790). A short presentation and demo video is available at this [page](https://www.secforcars.de/demos/10-automotive-scanning-framework.html).

## GitHub:

> **[GitHub - Fraunhofer-AISEC/gallia: Extendable Pentesting Framework](https://github.com/Fraunhofer-AISEC/gallia)**
>
> Extendable Pentesting Framework
