ROS Scout

A network tool designed to find insecure ROS2 instances, capture communications, and enumerate DDS vulnerabilities.

ROS Scout is a specialized network analysis tool engineered to discover and assess insecure ROS2 (Robot Operating System 2) instances running on a network. As autonomous systems become increasingly integrated into connected environments, ensuring the security of their underlying middleware is paramount.

Key Capabilities

  • Passive Network Analysis: Captures PCAP data to silently identify ROS communications without actively disrupting the network.
  • DDS Fingerprinting: Extracts critical information from the network traffic to determine the underlying Data Distribution Service (DDS) implementation and its exact version.
  • Configuration Extraction: Automatically identifies the ros_domain_id and extracts Quality of Service (QoS) settings to analyze system resilience and communication patterns.
  • Vulnerability Scanning: Cross-references the discovered DDS implementation and version against known CVEs (Common Vulnerabilities and Exposures) to flag vulnerable instances.
  • System Enumeration: Actively or passively enumerates active topics, services, and nodes within the ROS2 graph, providing a comprehensive map of the robotic system’s internal structure.