ROS Scout
A network tool designed to find insecure ROS2 instances, capture communications, and enumerate DDS vulnerabilities.
ROS Scout is a specialized network analysis tool engineered to discover and assess insecure ROS2 (Robot Operating System 2) instances running on a network. As autonomous systems become increasingly integrated into connected environments, ensuring the security of their underlying middleware is paramount.
Key Capabilities
- Passive Network Analysis: Captures PCAP data to silently identify ROS communications without actively disrupting the network.
- DDS Fingerprinting: Extracts critical information from the network traffic to determine the underlying Data Distribution Service (DDS) implementation and its exact version.
- Configuration Extraction: Automatically identifies the
ros_domain_idand extracts Quality of Service (QoS) settings to analyze system resilience and communication patterns. - Vulnerability Scanning: Cross-references the discovered DDS implementation and version against known CVEs (Common Vulnerabilities and Exposures) to flag vulnerable instances.
- System Enumeration: Actively or passively enumerates active topics, services, and nodes within the ROS2 graph, providing a comprehensive map of the robotic system’s internal structure.