A command-line utility to probe EVSE and CSMS over OCPP1.6, and sniff OCPP traffic over LAN.
Open Charge Point Protocol (OCPP) is used to communicate betweeen Electric Vehicle Supply Equipment (EVSE) and Charge Station Management Systems (CSMS). This tool makes use of the OCPP library provided by MobilityHouse to query these systems for purposes of red team engagement. Using scapy, evsetool can also listen for all OCPP1.6 traffic sent over the local network (i.e. the WiFi network the EVSE is connected to).
Versions 2.0 and later of the OCPP protocol implement actual encryption, so the purpose of this tool in its current form is to demonstrate the vulnerability of OCPP1.6 in order to speed adoption of newer versions of the protocol.
*** This tool is for educational and awareness purposes only. Do NOT use this tool to attempt to breach systems for which you do not have explicit authorization to do so. The author(s) of this tool are not liable for any misuse of the tool ***
evsetool requires the following dependencies:
The tutorial in this section requires the following additional dependencies:
- Docker, with Docker Compose available
To install evsetool:
git clone https://github.com/witchofthewires/evsetool.git
cd evsetool
python -m venv venv
venv/bin/python -m pip install -r requirements.txt
To install StEVe, an open source CSMS, for purposes of testing:
git clone https://github.com/steve-community/steve.git
cd steve
sudo docker-compose up -d
Wait about 5 minutes for Docker Compose to bring the StEVE application online, then execute the following:
mariadb -u steve --password=changeme -P 3306 --skip-ssl < steve-config.sql
To run the sniffer, execute the following in the evsetool directory:
sudo venv/bin/python evsetool/evsetool.py --sniff -v
To query the CSMS with a dummy transaction, open a different terminal and execute the following in the same directory:
venv/bin/python evsetool/evsetool.py --csms -v
If all goes well, your output should resemble the following.
venv/bin/python -m pytest
This project is licensed under the MIT License - see the LICENSE.md file for details