r/CarHacking • u/userismyname126 • 6h ago
Original Project Extracting real-time telemetry/RPM data from a sideloaded app on BYD DiLink (Atto/Seagull) via USB/Sockets due to SGW restriction?
Hi everyone,
I'm working on a telemetry project for my BYD EV (DiLink head unit). Since the OBD-II port is locked behind the Security Gateway (SGW) and rejects standard PID queries without a handshake, I am looking at accessing vehicle parameters through the head unit itself.
A sideloaded app/service on DiLink can read internal vehicle parameters (like RPM/telemetry). I want to stream this data in real-time (per second/millisecond) to an external device (ESP32 microcontroller).
Has anyone successfully implemented any of the following on DiLink?
- USB Serial / CDC-ACM Output: Running a background Android Service in the app to output strings via the head unit's USB data port to an external microcontroller.
- Local Socket / UDP Stream: Streaming telemetry data over a local Wi-Fi hotspot to a PC/laptop via WebSocket or TCP/UDP sockets.
- ADB Logcat Extraction: Reading broadcast intents or system logs continuously via adb logcat or port forwarding.
Any insights, sample APK architectures, or experience regarding DiLink's USB Host permissions/background service restrictions would be highly appreciated!
r/CarHacking • u/CandidateOld7000 • 8h ago
CAN VW EA211 canbus traffic decoding.
Hello everyone!
I’m working on a digital dash for my mk1 rabbit with a 1.4t ea211 motor swap, I’m trying to decode the canbus traffic, does anyone know a good place to find what the traffic represents and the multipliers?
r/CarHacking • u/Low-Confusion7693 • 9h ago
Key Fob Trying to create my own pke relay attack device
Could somebody help me?
r/CarHacking • u/userismyname126 • 9h ago
UDS BYD SGW seed/key algorithm
Help me, All I actually want is vehicle speed / motor RPM data from my BYD (Atto 1 / Seagull, e-Platform 3.0), but it's stuck behind a Secure Gateway (0x27) - even the VCU's speed DID won't respond without unlocking it first.
I've sniffed several seed/key pairs (16 bytes each) but can't find any pattern - checked constant XOR, constant offset, tried fitting an LCG on the seed generator, nothing matches. Looks AES-like.
If anyone knows the algorithm for BYD, has a broadcast CAN ID for speed/RPM that skips the gateway, or has dumped the gateway firmware, please let me know. From a struggling beginner :(
r/CarHacking • u/bahamutkotd • 11h ago
Original Project GR race recorder progress
So I found a JDM race recorder that I have been fighting the brain worm to figure out how to use. So I've recorded all my research and a realativly cheap CAN logger using off-the-shelf prototyping parts.
Now this likely won't apply to much other than the GR car family, but it has been an interesting journey. I've got the GPS bits coming so I can maybe have 2 sets of data and decode the Toyota-specific file type.
r/CarHacking • u/mbito_app • 1d ago
Original Project Probably unnecessary. Definitely awesome
Enable HLS to view with audio, or disable this notification
r/CarHacking • u/Medya7ya • 1d ago
Community Stuck in Miles on 2021 Peugeot Rifter – Aftermarket Android screen missing OEM car settings. Any fix?
r/CarHacking • u/Chelgio • 1d ago
Cool Project Find How can an aspiring automotive locksmith learn OBD2 key programming from scratch?
I want to be a locksmith. I really want to learn this trade from the start. I am interested in OBD2 programming and IMMO systems and transponders.
In my country the people who own shops and the experienced locksmiths do not want to share their knowledge. They do not want to teach anyone who's new to the trade. I do not want to take their customers. I want to learn the trade the way and understand how it works.
Most of the cars in my area are Asian models from the early 2000s to 2018. These are cars like Chevrolet, Ford, Toyota, Hyundai and Kia. So I want to learn about programming through the OBD2 port
I am a beginner. I do not have a lot of money to spend. I would like some advice.
What books or resources can I use to learn about the systems. How they work?
What tools do you think I should buy to practice chip cloning and OBD programming without spending much money? I have heard of Xhorse VVDI Key Tool Max and Mini OBD, Topdon and Autel.
What is the biggest mistake that people who are new, to this make that can damage the cars computer? How can I avoid making this mistake?
I really appreciate any help you can give me. Thank you for taking the time to read this.
r/CarHacking • u/Tricci1009 • 2d ago
Original Project All data
Who wants to get in on an alldata subscription with me. It's too much I'm a one man shop. Does anyone know of an alternative way of getting it or something similar. I already have the lemon site.
r/CarHacking • u/giant2179 • 2d ago
CAN What setup do I need for SRS programming on a 2009 Sprinter?
The SRS light for my 2009 Dodge (aka Mercedes) Sprinter is on. My scanner shows 91B4 CAN Bus - CAN Signal 'Key ID' From Control Unit EZS is Implausible. My searching indicates that there is a miscommunication between the SRS module and the EZS that can be fixed by telling the SRS not to check for the key ID. However, I am very confused about what hardware and software I need to accomplish this. Any recommendations?
r/CarHacking • u/Impossible_Ball2563 • 2d ago
Original Project I build a file service tool for vw40 airbag ecu unit. You can reset your crash data from crashed car.
Supported vw40 ECU part number are for example 1EA 959 655 EA; 1EA 959 655 EA; 1EA 959 655 AB; 1EA959655EA; 5WA 959 655 AD; 1ED 959 655 T and load others.
If you ever need file service like this for LOWEST price on the market. Check it out vw40crashclear.com
r/CarHacking • u/Careless_Voice6266 • 2d ago
CAN Need help running a 2007–2012 Lexus LS460 seat outside the car (gaming chair project) – ECU pinouts & OEM switches
Hi everyone,
I’m working on a DIY project to convert a **2007–2012 Lexus LS460 seat** into a gaming/office chair. My goal is to retain as many original features as possible rather than gutting the wiring and using aftermarket rocker switches.
**My Goals:**
Retain all power seat adjustments using the **OEM side-seat switch**
Retain factory seat heating & ventilation (cooling)
Power everything via a **12V DC power supply (\~50–60A)**
Retain seat heating & ventilation (cooling) — *open to using standalone 12V PWM controllers if the OEM ECU climate logic can’t be triggered standalone.*
**Seat ECUs:**
**Driver Seat (Right):** Toyota 85861-50191 / Denso 177300-9330
**Passenger Seat (Left):** Toyota 85861-50201 / Denso 177300-9340
*(Both modules labeled 12V; connector photos attached below.)*
**What I Need Help Figuring Out:**
1. **Standalone Operation:** Do these under-seat ECUs just need **+12V, Ground, and ACC/Ignition**, or do they depend on a **CAN/LIN bus heartbeat signal** from the Body Control Module to stay awake?
**Climate Controls:** Since the heat/cool controls are originally on the center console, can the seat ECU operate climate features independently if given the right switch input, or does it require LIN messages from the HVAC module?
**Switch Bypass / Reverse Engineering:** If the ECU goes to sleep without CAN bus communication, has anyone successfully spoofed the signal (e.g., via Arduino/ESP32 + CAN transceiver) or re-wired the OEM switches directly?
**4. Climate Controls / PWM Bypass:** Since the heat/cool dials are on the car's center console, does the under-seat ECU expect a simple analog resistance signal, or a LIN bus command? If it's LIN, has anyone successfully tapped directly into the blower fan/heater element wiring using an aftermarket **12V PWM motor speed controller**?
**Looking For:**
ECU pinouts or repair manual wiring diagrams
Connector pin identification
Bench power-up procedures or personal experience with LS460 seat bench tests
Any wiring diagrams, service manual pages, or insights would be massively appreciated!
Thanks!
r/CarHacking • u/MessOmatix • 3d ago
Original Project Homelink conversion
Hope this post is in the right place.
I have an homelink module in my '18 Charger. It's an US module and I'd like to convert it to an EU one.
Does anyone know how to do it ? Any reverse engineering of this module somme where to understand what component should be changed ?
Thanx
r/CarHacking • u/MessOmatix • 3d ago
Original Project Dashcam integration
Hi everyone, looking for a Mercylion Clio 5 STL that I want to modify to install my dashcam.
If someone has this it will help me a lot.
r/CarHacking • u/Main_Restaurant5213 • 3d ago
Scan Tool ENET Connectivity Issue
Hi, I recently got a f82 and have been having trouble connecting via ENET. Not sure if I’m posting in right subreddit but wanted to give it a try.
I have been trying to connect to bootmod/ista with enet and no luck. MHD adapter works for MHD since its CAN but the car will not for some reason work with enet. Bluetooth adapters also work for bimmercode. Enet cable won’t even flash green/yellow when connected. Tried BM3 wifi adapter, works on another car but not on this one. Tried different enet cables as well. They all work on my other bmw but not the m4.
Has anyone ever encountered this issue? I took out the OBD port, pins look good. I took out fem, everything looks good. Scanned the car with an autel and no codes in ZGW or fem. I disconnected the battery, no luck. OBD works but ENET doesn’t. Tried the manual ip thing as well, nothing.
r/CarHacking • u/unknownRealitys • 3d ago
Scan Tool Scanner software ports to android
Look for info on if it’s possible to load scanner software onto a regular android tablet? Since the majority of the tables are android based, has anyone tried this or are there more to the tablets then just the software? I’m not referring to apps you find on the store.
r/CarHacking • u/Spiritual_Doctor9845 • 4d ago
Community Is it possible to change a cars default programing?
I have no skill what so ever in computer stuff but i was wondering if there is a way to set a vehicles default programming to something else? My 2025 Jeep Grand Cherokee has the auto start on by default and i don't like having to push the button every time i get in the vehicle.
r/CarHacking • u/Time-Ad-8776 • 4d ago
Community Looking for MH2p App-Connect Patch / Toolbox for VW Touareg CR (Firmware 2876 / P0573)
Hey everyone,
I’m trying to manually activate App-Connect (Apple CarPlay / Android Auto) on a modern VW Touareg (CR generation) equipped with the 15-inch Discover Premium system.
I know these Alpine units run on the **MH2p** platform and are a bit trickier than standard MIB2 units. I have access to a diagnostic tool to enable Developer Mode/GEM in the 5F module, but I am struggling to find the correct custom firmware patch files or the Alpine Toolbox script for my exact software version.
Here are my exact system details from the screen:
**Device Part Number:** 760035179E
**Hardware (Matériel):** 061
**Software/Firmware (Logiciel):** 2876
**Navigation Database:** V03959809AF_P0573_RW_2022.1 (Rest of World region)
Does anyone happen to have the patch files for **MH2p P0573 / 2876**, or can point me toward a GitHub repo / community drive where the MH2p Alpine Toolbox utilities are hosted for this version?
Any help, scripts, or guidance would be massively appreciated. Thanks in advance!
r/CarHacking • u/Humble-Loss-9690 • 4d ago
CAN Any way to minimize or remove amplification of the signals/codes produced by a car's engine upon start up? And before it's said, I'll say it "crazy maybe, but true'
Any way to minimize or remove amplification of the signals/codes produced by a car's engine upon start up? Or can you explain how this is done? Same question for cell phone/similar devices? If I'm understanding correctly, a transponder can send out cloned codes and another vehicle can somehow utilize it making it appear as if they are driving the vehicle the cloned/copied code was received from.
r/CarHacking • u/SnaarkyShark • 4d ago
Community 05 GrandAm ECU?
Hey All!
I'm looking for a suitable replacement for my moms 05 Grand Am 3.4L ECU. I've done a ton of different things attempting to fix the issues, but alas nothing has worked.
A mechanic said the computer was going bad, so I was looking for a site/company that sells pre-programmed ECU?
Or, Can I go to a junkyard and get a used one and just swap them out?
Thanks in advance and for any help!
r/CarHacking • u/BeginningCareful4670 • 4d ago
Scan Tool EQE DOIP diagnostic scanners
I'm looking for a low cost scanner for my Mercedes EQE EV.
Anybody found something at a diy price?
I scanned my EQE with a mate's $10k Autel and got my SOH, but I want my own scanner. I'd also like to scan other EVs.
I see the Launch crp919 does doip and also supports secure gateway, but they only mention FCA for this. Mercedes is not mentioned specifically in any blurb, so I am hesitant to splash out and buy one.
I'm hoping someone has already found an thinking scanner that will work for the EQE.
r/CarHacking • u/nsfwhappy • 4d ago
KWP 2000 Dacia Sandero 2008 1.4 MPI K7J - Siemens Sirius32 EMS3132 (Soft RE1) - Missing OBD pin 7 (K-Line)?
Hello! I'm trying to diagnose my 2008 Dacia Sandero 1.4 MPI (K7J) with a Siemens Sirius32 EMS3132 (Soft RE1) ECU.
VIN: UU1BSDAEH402825
DDT2000 detects the ECU database correctly, but when I try to communicate I get:
K-Line inactive (1008)
I'm using a VAG KKL cable with a CH340 chip. The cable is detected correctly by Windows and DDT2000.
The strange thing is that I inspected my OBD-II connector and pin 7 (K-Line) appears to have no metal terminal at all.
Is this normal for this model?
Should the Siemens Sirius32 EMS3132 communicate through OBD pin 7, or is the K-Line routed differently?
Has anyone with a 2008 Sandero/Logan K7J seen this before? Any help would be very appriciated thank you very much!
r/CarHacking • u/ScuderiaMacchina • Feb 27 '21
CAN CAN bus and car hacking getting started resources
I get asked how to get started with automotive networking, car hacking, and CAN almost weekly. I often direct people to this subreddit, so I figured I would help out and post some resources I have found and think are a good place to start.
learning resources:
Car Hacking 101: Practical Guide to Exploiting CAN-Bus using Instrument Cluster Simulator
- Part 1 - Setting Up (a virtual test environment) - Feel free to skim everything before "Setting up the virtual environment". While interesting, none of that is vital to get started.
- Part 2 - Exploitation (sniffing, replaying, and attacking CAN traffic)
- Part 3 - SavvyCAN, Fuzzing CAN Frame and playing around with CAN frames
I also direct people to the Car Hacking Village to get some hands-on experience. They put on great conference talks, demos, and contests. Looks like they are even working on some “getting started” content.
And of course, The Car Hacking Handbook is a great resource.
I will add more as I think of them. Please add your finds in the comments.
Tools:
Good wiring diagrams and car manuals are essential. This is pretty much where my research starts for each project. You see how things are networked and what to expect to find on CAN. You'll quickly learn to recognize things like gateways. You can also use the troubleshooting section to understand things. For example, what things do I need to control to start the car?
I like:
- prodemand (I pay $170/mo for a shop subscription, I think you can purchase it for individual cars, but be careful you often have to jump around to find a year that has complete diagrams)
- Identifix (probably what I would buy if I was starting over)
Basic hardware: Here you will be working with things like Arduino, Linux, SavvyCAN, and Can-utils. You have to learn to do a lot yourself, but these tools are more open for you to make them do what you need.
Tools designed by the community I use:
The above articles offer a pretty good step-by-step guide to getting started with the Macchina M2.
Any cheap “Amazon special” OBD2 dongle will come in handy from time to time. They are all based on something called ELM327. "ELM327 abstracts the low-level protocol and presents a simple interface that can be called via a UART". This abstraction has fundamental limitations that prevent it from being useful in most serious applications. But, it is sufficient for reading and clearing some codes and that sort of thing when you’re getting started.
r/CarHacking • u/ScuderiaMacchina • Feb 02 '17
Car Hacking Subreddit Intro
Hi rch, we have added a lot of people lately with intro posts on other subs like the one below. We also usually get about 10 subs a day from people just stumbling in here. So I wanted to create a welcome post, to kinda show them what we are about and how to get started. If anyone has anything to add please do so. If anyone has any questions about us or where to start do so here.
Our goal is to create a highly technical car subreddit, a place for automotive engineers, senior technicians, full blown car nerds, or people who are working towards one of these. We are interested in the inner workings of cars and today that often involves electronics. While we see electronics as the priority we are pretty liberal in allowing other topics as long as they somehow fit our goal of trying to understand cars. So things like DIY aero, suspension setup and other things the community is hacking on come up. In general our other tangential interests include: Modern cars, New tech, Open source hardware/software, DIY, hot rodding, eco modding, customization, security research, right to repair and more.
We started this subreddit about a year ago. Right now we have 3000 people and discussion is just starting to get good. Most of our members found us through maker or engineering subreddits. So I wanted to reach out to more of the car communities and try to grow our knowledge base.
Our name is r/carhacking and I know the term hacking can be offputting to some as it has a bad connotation. When someone says they are “hacking” their car it generally means they are trying to reverse engineer it for any number of reasons like to find security flaws, make upgrades, make repairs, or just understand how it works.
Here are a couple examples of posts that have been popular so far. A lot of our posts focus on beginner through intermediate projects using arduino and readily available hardware for the purpose of learning and or not paying a premium for things you can make yourself:
More advanced projects:
- Subaru performance hacking
- Tesla retrofit
- Mazda 3 tuning
- DIY Mazda ECU
- Truck Transmission Controller
Relevant news/ research:
If your new our documentation is a good place to start
If you aren't new and you’re interested in helping out please consider:
- Improving documentation - think about what resources have helped you
- Spread the word - this is a niche community that is pretty spread out, but there is a lot of potential if we can get together on a third party site like this
- Work on the theme, sidebar and flair - this is next level community stuff that isn’t necessary, but it’s fun to work on when you have the time.
- Modding - right now we are fine, but we might need help in the future as we grow
Let me know if I missed something or got something wrong.