NMFTA Fleet Cyber Challenge
NMFTA Cybersecurity Program

Fleet Cyber Challenge

Hands-on, interactive commercial vehicle cybersecurity challenges designed for fleet IT teams, maintenance technicians, and security researchers. Analyze SAE J1939 communications, evaluate Electronic Logging Devices (ELDs), investigate firmware update binaries, and audit telematics gateways.

Defender & Investigator Perspective

The challenges are intended to demonstrate and teach specific aspects of fleet-relevant cybersecurity; there is some fleet theming of the challenges which is not always perfect and might not match your true day to day activities -- but we hope you enjoy it!

Challenge Tracks

Seven specialized categories covering the modern commercial vehicle cyber ecosystem.

🚛

CAN Traffic Analysis

Connect live to multi-ECU virtual vehicle simulators running SAE J1939 and KWP2000 diagnostic stacks. Enumerate Controller Applications, harvest seed pools, and deduce cryptographic keys.

Start Track →
📡

ELD Compromise

Investigate in-cab Electronic Logging Device hardware gateways, inspect mobile-to-gateway REST APIs, and uncover unauthorized raw CAN frame injection vectors.

Start Track →
🛰️

GPS Spoofing Investigation

Cross-validate satellite navigation fixes against ground Wi-Fi AP triangulations and tractor wheel-speed sensors to detect freight diversion attacks.

Start Track →
💾

Fleet Log Analysis

Audit in-cab telematics Android app storage sandboxes, unencrypted SQLite database caches, and remote onboard diagnostic (ROBD) PGN leakage.

Start Track →
⚙️

Firmware Artifact Analysis

Reassemble multi-frame UDS TransferData firmware payloads from packet captures and extract embedded S19 Motorola microcontroller images from Windows installer executables.

Start Track →
🔑

Mobile App Investigation

Decompile telematics companion APK packages to discover hardcoded production API tokens and inspect mobile device management (MDM) proxy archives.

Start Track →
⏱️

Incident Timeline Reconstruction

Correlate perimeter web server RCE exploitation logs with database audit transactions and outbound telematics command queues in a multi-stage intrusion investigation.

Start Track →
🏆

Champion Completion Reward

Complete all 7 operational tracks to unlock the official NMFTA Virtual Badge, download high-resolution vector assets, and register for completion certification.

View Reward & Badge →