r/CarHacking • • Feb 02 '17

Car Hacking Subreddit Intro

91 Upvotes

Hi rch, we have added a lot of people lately with intro posts on other subs like the one below. We also usually get about 10 subs a day from people just stumbling in here. So I wanted to create a welcome post, to kinda show them what we are about and how to get started. If anyone has anything to add please do so. If anyone has any questions about us or where to start do so here.

Our goal is to create a highly technical car subreddit, a place for automotive engineers, senior technicians, full blown car nerds, or people who are working towards one of these. We are interested in the inner workings of cars and today that often involves electronics. While we see electronics as the priority we are pretty liberal in allowing other topics as long as they somehow fit our goal of trying to understand cars. So things like DIY aero, suspension setup and other things the community is hacking on come up. In general our other tangential interests include: Modern cars, New tech, Open source hardware/software, DIY, hot rodding, eco modding, customization, security research, right to repair and more.

We started this subreddit about a year ago. Right now we have 3000 people and discussion is just starting to get good. Most of our members found us through maker or engineering subreddits. So I wanted to reach out to more of the car communities and try to grow our knowledge base.

Our name is r/carhacking and I know the term hacking can be offputting to some as it has a bad connotation. When someone says they are “hacking” their car it generally means they are trying to reverse engineer it for any number of reasons like to find security flaws, make upgrades, make repairs, or just understand how it works.

Here are a couple examples of posts that have been popular so far. A lot of our posts focus on beginner through intermediate projects using arduino and readily available hardware for the purpose of learning and or not paying a premium for things you can make yourself:

More advanced projects:

Relevant news/ research:

If your new our documentation is a good place to start

If you aren't new and you’re interested in helping out please consider:

  • Improving documentation - think about what resources have helped you
  • Spread the word - this is a niche community that is pretty spread out, but there is a lot of potential if we can get together on a third party site like this
  • Work on the theme, sidebar and flair - this is next level community stuff that isn’t necessary, but it’s fun to work on when you have the time.
  • Modding - right now we are fine, but we might need help in the future as we grow

Let me know if I missed something or got something wrong.


r/CarHacking • • Feb 27 '21

CAN CAN bus and car hacking getting started resources

292 Upvotes

I get asked how to get started with automotive networking, car hacking, and CAN almost weekly. I often direct people to this subreddit, so I figured I would help out and post some resources I have found and think are a good place to start.

learning resources:

Car Hacking 101: Practical Guide to Exploiting CAN-Bus using Instrument Cluster Simulator

I also direct people to the Car Hacking Village to get some hands-on experience. They put on great conference talks, demos, and contests. Looks like they are even working on some “getting started” content.

And of course, The Car Hacking Handbook is a great resource.

I will add more as I think of them. Please add your finds in the comments.

​

Tools:

Good wiring diagrams and car manuals are essential. This is pretty much where my research starts for each project. You see how things are networked and what to expect to find on CAN. You'll quickly learn to recognize things like gateways. You can also use the troubleshooting section to understand things. For example, what things do I need to control to start the car?

I like:

  • prodemand (I pay $170/mo for a shop subscription, I think you can purchase it for individual cars, but be careful you often have to jump around to find a year that has complete diagrams)
  • Identifix (probably what I would buy if I was starting over)

Basic hardware: Here you will be working with things like Arduino, Linux, SavvyCAN, and Can-utils. You have to learn to do a lot yourself, but these tools are more open for you to make them do what you need.

Tools designed by the community I use:

The above articles offer a pretty good step-by-step guide to getting started with the Macchina M2.

Any cheap “Amazon special” OBD2 dongle will come in handy from time to time. They are all based on something called ELM327. "ELM327 abstracts the low-level protocol and presents a simple interface that can be called via a UART". This abstraction has fundamental limitations that prevent it from being useful in most serious applications. But, it is sufficient for reading and clearing some codes and that sort of thing when you’re getting started.

​


r/CarHacking • • 37m ago

Original Project Universal on-board telematics unit

• Upvotes

Im looking for a universal onboard telematics unit that would allow me to control my car anywhere in the world. I am aware of macchina a0 and Automotive grade Linux, but I wonder if there is complete product out there that I can customize before I have to build my own


r/CarHacking • • 43m ago

Article/news BEANalyzer UltraPro 5 — some updates from my Toyota/Lexus BEAN MPX project

Thumbnail
• Upvotes

r/CarHacking • • 1h ago

Original Project BEANalyzer UltraPro 5 – New BEAN MPX analysis tools, Timeline replay, Lab Workbench and more

Thumbnail
image
• Upvotes

r/CarHacking • • 1h ago

Community VW/Audi GRP/ODIS online access with SFD1, SFD2 and Component Protection — is this technically plausible?

• Upvotes

I’m working on a 2024 Audi SQ5 FY USA → EU conversion and I currently need online authorization for several protected control units.

I found a provider offering a 24-hour GRP/ODIS account for $100. They claim the account is created using my own email, I receive the full login credentials, can change the password, and don’t need them for OTP.

They also claim the access includes SFD1, SFD2-protected coding/adaptations and Component Protection functions without buying separate SFD/SFD2 tokens.

Has anyone here used this type of access before? Is this technically how current ODIS/GRP access can work, especially for MY2024 Audi with SFD2?

I’m mainly trying to verify what functionality I should realistically expect before paying.


r/CarHacking • • 19h ago

Original Project Ford Sync4 update (no FDRS)

Thumbnail
image
0 Upvotes

Hey everyone. I have ford mondeo evos 2023. The sync system has never been updated and when I enter the VIN in ford's website, it says the car will receive OTA but the car has no telematics unit. The dealer asks for upwards of $250 to update the system. I cannot purchase FDRS subscription because ford blocks it in Saudi Arabia. What are my options here?


r/CarHacking • • 1d ago

No Protocol Volume Increase After Calls

Thumbnail
1 Upvotes

I'm re-posting here because this is more a "computer" issue than just factory stereo and specifically any advice on if the entertainment units have been cracked yet.


r/CarHacking • • 1d ago

Original Project Forgot your MaxxECU tune password?

Thumbnail
1 Upvotes

r/CarHacking • • 1d ago

Original Project Need help depinning this connector (Toyota side mirror)

Thumbnail
image
9 Upvotes

Hi all,

Would it be possible to depin this without cutting the wiring?


r/CarHacking • • 1d ago

Scan Tool OBD2 Adapter für bspw. Start-Stopp Memory Funktion

0 Upvotes

Hallo zusammen,

bin absolut neu in dem Subreddit, ich hoffe meine Frage ist hier gut aufgehoben und jemand hat die nötige Minute um mir weiterzuhelfen 🙋🏽‍♂️

Ich hab mir vor kurzem eine E-Klasse W213 gekauft und bin am überlegen, ein paar kleinere Dinge umzucodieren.
Mein „Hauptwunsch“ ist es, die Memory Funktion für die Start-Stopp-Automatik einzustellen, damit ich nicht bei jedem losfahren und jedem Modiwechsel erneut auf den blöden Knopf drücken muss.
Weiterer „Wunsch“ wäre, im HeadUp Display mehr Ansichten freizuschalten als „nur“ die 4 Standardauswahlmöglichkeiten.

Hat diesbezüglich jemand Erfahrung mit OBD Adaptern und eventuell eine konkrete Empfehlung, bei welchem Anbieter das ohne Probleme geht?
Gibt es irgendetwas wichtiges zu beachten?

Vielen Dank schonmal


r/CarHacking • • 1d ago

IVI Volvo AAOS security research

6 Upvotes

I am looking for owners of recent Volvo and Polestar models, seeking help to better characterize a security vulnerability that I found while digging into the software stack of my own car, a Volvo EX30. Before I make the responsible disclosure to Volvo Cars, I'd like to confirm whether it affects other models as well.

This is where I need some help: I need access to the software running on the AAOS (Android Automotive OS) infotainment systems of potentially affected models. Of course only the system part of the head unit, nothing that is individual to a vehicle (device/vehicle ID, user generated data, etc.).

The particular brands/models I'm interested in:

  • all Volvo Cars models that use AAOS ins their infotainment system (vehicles made in the last 3-5 years or even older models that might have gotten it as an upgrade)
  • all Polestar models that use AAOS in their infotainment system (vehicles made in the last 5-6 years)

I suspect that the issue predates the arrival of AAOS, but I'm not really familiar with the Sensus architecture. Still, if somebody has a file system dump from an older Sensus infotainment system, I'd like to take a look at it too.

Here's what I need:

  • a dump of parts of the file system like /product, /system, /system_ext, /vendor, etc. (or an OTA update package, i.e. *.VBF files)
  • name of the vehicle model
  • model year
  • software version

I also wrote a non-instrusive app that can extract a file system dump from an AAOS device (of course not everything, just what any 3rd party app can read), it's available on GitHub. You can compile it yourself or I can give access to my Google Play Internal Testing track.

I'll not give away any details about the vulnerability itself before I gave Volvo a chance to fix it, so don't even ask.

If somebody is willing to help with this, I wrote a more lengthy page about the system dumper app, my motivation, myself (I don't try to hide my identity) and how you can contact me.

Of course I understand that anybody could write this with malicious intent in mind. I don't think there's much more I could do to convince people that my intentions are honest. If I don't get useful feedback/help, I'll just hand in (to Volvo Cars) what I know about the EX30 and hope they'll actually fix it. The worst that could happen is that they do an ineffective fix for the EX30, they don't fix any other models (claiming that they are not affected by the issue and I cannot prove them wrong) and in reality they all remain vulnerable and somebody with malicious intent starts working on this. In that scenario there's still the option to involve regional authorities (US, EU, etc.) and the media. Both can exercise the necessary pressure to make an actual fix happen (there has been precedent with models from other automakers).


r/CarHacking • • 1d ago

Article/news MPVI3 OBD-side hardware failure after very little use – anyone experienced this?

1 Upvotes

I'm curious if anyone else has experienced a similar failure with an MPVI3.

I originally upgraded from an MPVI2 to an MPVI3 a couple of years ago. However, I've only used the MPVI3 a handful of times. I originally bought the MPVI2 to tune my GTO, which has been stored for the last couple of years, so I've primarily only used the MPVI3 occasionally to help diagnose issues with my wife's daily driver.

Recently, the MPVI3 stopped powering up when connected to the vehicle's OBD2 port. It will still power up when connected to my laptop through USB, but it won't communicate with the vehicle.

I went through troubleshooting with HP Tuners and eventually sent the device in for them to inspect. They confirmed that the device is not communicating through the OBD side and told me that they are unable to repair it because it is outside of the warranty period.

I asked if they knew what caused the failure, particularly since the device has had very little use, and they said they unfortunately we aren't sure what caused the OBD-side communication failure.

They have suggested upgrading to an MPVI4 at the reduced upgrade price, which I understand is cheaper than purchasing a new interface. I'm probably going to do that if I have no other option because I need a working interface, but I'm trying to understand what may have happened to the MPVI3 first.

I've found a few older reports of similar MPVI3 hardware failures, including at least one case where an owner reported using the device only once before it stopped working. I'm wondering if anyone here has experienced a similar OBD-side failure with an MPVI3, particularly one that had relatively little use.

If you've had an MPVI3 fail like this:

  • What were the symptoms?
  • Did HP Tuners identify the failed component/circuit?
  • Was your unit replaced or repaired?
  • Was it inside or outside the warranty period?
  • If it was out of warranty, did HP Tuners offer any type of goodwill accommodation?

I'm not trying to bash HP Tuners—I have otherwise been happy with their products and would prefer to stay with the platform. I'm mainly trying to determine whether this is an isolated failure or something other MPVI3 owners have encountered.

I'd appreciate hearing from anyone who has experienced something similar.


r/CarHacking • • 2d ago

Tuning NTG5.1 region change

Thumbnail
2 Upvotes

r/CarHacking • • 1d ago

Cool Project Find Copdar - A no-account vehicle-labeling tool looking for feedback

Thumbnail
1 Upvotes

r/CarHacking • • 1d ago

Scan Tool Help finding North American GlobalTIS file?

1 Upvotes

Hey all, I have looked for days and days to find a copy of GlobalTIS software for North American vehicles. Everything is Saab, Opel, etc and I have already verified they dont work with cars here in the United States. Yes I've been to MHH auto, aliexpress, etc. And already been scammed with more Opel or Saab installations. I need the US / NAO version.

Please, if anyone has a copy, legit download link, ISO or VM ware image, etc I would be eternally greatful!!


r/CarHacking • • 2d ago

Original Project Panel/Kick Panel Pin-out" read out diagram

Thumbnail
gallery
2 Upvotes

2008 kia optima LX 2.4

Any one with Wiring diagrams for this vehicle for ignition switch, ECU, PCM, ign1 and ign2, Throttle body, crankshaft sensor, camshaft sesor, all if any engine components etc with fuse box by kick panel or under the hood and it connection numbers, wire color that you would share for free it would be great. [retirenavy1294@gmail.com](mailto:retirenavy1294@gmail.com) Thank you.


r/CarHacking • • 3d ago

ELM327 Which "premium" Bluetooth Classic (non-BLE) OBD2 adapters are worth supporting on iOS?

Thumbnail
image
41 Upvotes

Hi everyone,

I've built an iOS app that shows live car data on CarPlay and on a phone dashboard.

So far I've tested these BLE 4.0 adapters, which Apple lets me use without any extra certification:

  • Vgate iCar
  • Vgate iCar Pro
  • vLinker BM+

They're a bit slow but perfectly usable.

I've also ordered an OBDLink MX+, which I'll need to get approved for my app through Apple's MFi program. It caught my eye because it claims to be up to 3x faster than typical adapters (via STN chip), and so far it's the only one my users have actually asked me to add.

My question: are there other "premium" adapters that go through MFi that I should know about? Supporting the right ones could make a big difference.

Thanks in advance!


r/CarHacking • • 3d ago

Article/news CANsub CAN interface FW 02.05.00 - webCAN now includes dark mode!

Thumbnail
video
24 Upvotes

So, I got quite some flak from you guys for using 'white mode' in my previous post regarding my AI CAN bus reverse engineering article... so in our new CANsub firmware 02.05.00 we now support an optional 'dark mode' for the webCAN software (hosted on the device).

Hope you like it! ;-)

Martin, co-owner at CSS Electronics


r/CarHacking • • 3d ago

Original Project Update: my CAN-to-BLE bridge just did its first international hillclimb, with live MaxxECU data burned into the onboard

Thumbnail
video
172 Upvotes

Two months ago I posted about the CAN-to-BLE bridge and app I built after putting a standalone ECU in my Golf [link to the first post]. Thanks for all the comments, they pushed me to keep going. Here's a proper follow-up.

The video. This is NNR Team's MaxxECU car at the Buzet hillclimb in Croatia, a round of the FIA European Hill Climb Championship, 5 km, 32 turns, 250 m of climb. Everything on screen comes from the car and from my own box. Boost, oil temp, oil pressure, coolant and throttle come straight off the MaxxECU's CAN broadcast. Speed, G-forces and the course map come from the device's own 25 Hz GPS and IMU, not the phone. The app burns all of it into the video on export, in one native re-encode, no screen recording.

What's new since the first post:

- Onboard logging: The device now logs the 25 Hz GPS, the IMU and the CAN bus to its own memory, with no phone in the car. Afterwards you pull the session over BLE and the app rebuilds the laps and runs.

- Bring your own camera: Shoot with a GoPro or DJI, import the footage, and the app renders the same HUD onto it from the device log.

- Hillclimb and sprint timing: Point-to-point courses with separate start and finish gates, not just circuits. That's what timed this run.

It started as a way to get RPM on my phone without dragging a laptop into the car. Seeing it run a real European hillclimb was a pretty good moment for a lockdown side project.


r/CarHacking • • 2d ago

Original Project BMW G20 Bosch DKOMBI4 bench startup / CAN wake-u

2 Upvotes

I have a Bosch instrument cluster 0263745119-10 / BMW 9432611 / 20236311, from a 2019 G20.
I'm testing it on a bench. According to the G20 wiring diagram I have:

  • Red/Blue → F73 supply Pin5
  • Red/Yellow → F34 supply Pin6
  • Brown → Terminal 31 Pin11
  • Brown/Black → Terminal 31 Pin12
  • Yellow/White → PT-CAN-H Pin9
  • Yellow/Black → PT-CAN-L Pin10

Both +12 V supplies and both grounds are connected.
CAN is 500 kbit/s.
I'm trying to find the actual CAN wake-up / Terminal 15 messages required to start DKOMBI4 without the rest of the vehicle.
I've tried the G30/F-series 0x12F and 0x130 messages but the cluster doesn't react.
Does anyone have the G20 DKOMBI4 CAN startup/network-management frames, or know what additional module/message is required to wake this Bosch cluster on a bench?

I really hope someone has CAN data or something useful because i have a cool project swap in mind i would like to use this cluster. :)


r/CarHacking • • 2d ago

Scan Tool Xentry open port passthru

2 Upvotes

I got openport from aliexpres and i am wondering is there a xentry passthru download link to install i want to use it on vm, i am looking but cant find anywhere thats free or i need to buy


r/CarHacking • • 3d ago

Original Project "Hacked" a pre-CAN analogue cluster

Thumbnail
video
460 Upvotes

This is a 1997-2005 Hilux cluster. Everything is in 12V signals, except for speedometer which is cranked directly from the transmission. For the 12V stuff, I used a breadboard and an ESP. It's pleasantly surprising how well the bulbs work for their age. This is just a fun disco mode I coded :)


r/CarHacking • • 2d ago

Original Project Nissan Quashqai 2026 CanBus for Speed Chime Beep

3 Upvotes

Hey All

I'm trying to ultimately disable the speed chime beep the EU enforces now on each car restart.
My approach was to sniff and then relay these wheel button commands on start.

Using SavvyCAN & Claude.

Current hardware
ESP-WROOM-32-oled & SN65HVD230

Pin 6,14 provides nothing on the obd which i've now learn this is due to the can gateway.

Before I go down this route was wondering if someone had any info on this and if my SN65HVD230 will work or if I'm expecting to see CAN FD traffic and need a different controller.

TIA


r/CarHacking • • 3d ago

Scan Tool Hex V2 Cable(A/market) with Latest VCDS Software 25.3

3 Upvotes

I've lost the installation CD that came with this product. Does anyone know where I can get a copy 🙏 or anyone that has a copy. Thanks 🙏🙏🙏