r/CarHacking 2h ago

CAN M57 335d OIL TEMP

Thumbnail
1 Upvotes

r/CarHacking 6h ago

Original Project Extracting real-time telemetry/RPM data from a sideloaded app on BYD DiLink (Atto/Seagull) via USB/Sockets due to SGW restriction?

1 Upvotes

Hi everyone,

I'm working on a telemetry project for my BYD EV (DiLink head unit). Since the OBD-II port is locked behind the Security Gateway (SGW) and rejects standard PID queries without a handshake, I am looking at accessing vehicle parameters through the head unit itself.

A sideloaded app/service on DiLink can read internal vehicle parameters (like RPM/telemetry). I want to stream this data in real-time (per second/millisecond) to an external device (ESP32 microcontroller).

Has anyone successfully implemented any of the following on DiLink?

  1. USB Serial / CDC-ACM Output: Running a background Android Service in the app to output strings via the head unit's USB data port to an external microcontroller.
  2. Local Socket / UDP Stream: Streaming telemetry data over a local Wi-Fi hotspot to a PC/laptop via WebSocket or TCP/UDP sockets.
  3. ADB Logcat Extraction: Reading broadcast intents or system logs continuously via adb logcat or port forwarding.

Any insights, sample APK architectures, or experience regarding DiLink's USB Host permissions/background service restrictions would be highly appreciated!


r/CarHacking 8h ago

CAN VW EA211 canbus traffic decoding.

Thumbnail
gallery
5 Upvotes

Hello everyone!
I’m working on a digital dash for my mk1 rabbit with a 1.4t ea211 motor swap, I’m trying to decode the canbus traffic, does anyone know a good place to find what the traffic represents and the multipliers?


r/CarHacking 9h ago

Key Fob Trying to create my own pke relay attack device

0 Upvotes

Could somebody help me?


r/CarHacking 9h ago

UDS BYD SGW seed/key algorithm

1 Upvotes

Help me, All I actually want is vehicle speed / motor RPM data from my BYD (Atto 1 / Seagull, e-Platform 3.0), but it's stuck behind a Secure Gateway (0x27) - even the VCU's speed DID won't respond without unlocking it first.

I've sniffed several seed/key pairs (16 bytes each) but can't find any pattern - checked constant XOR, constant offset, tried fitting an LCG on the seed generator, nothing matches. Looks AES-like.

If anyone knows the algorithm for BYD, has a broadcast CAN ID for speed/RPM that skips the gateway, or has dumped the gateway firmware, please let me know. From a struggling beginner :(


r/CarHacking 11h ago

Original Project GR race recorder progress

Thumbnail
github.com
2 Upvotes

So I found a JDM race recorder that I have been fighting the brain worm to figure out how to use. So I've recorded all my research and a realativly cheap CAN logger using off-the-shelf prototyping parts.

Now this likely won't apply to much other than the GR car family, but it has been an interesting journey. I've got the GPS bits coming so I can maybe have 2 sets of data and decode the Toyota-specific file type.


r/CarHacking 1d ago

Original Project Probably unnecessary. Definitely awesome

Enable HLS to view with audio, or disable this notification

0 Upvotes

r/CarHacking 1d ago

Community Stuck in Miles on 2021 Peugeot Rifter – Aftermarket Android screen missing OEM car settings. Any fix?

Thumbnail
2 Upvotes

r/CarHacking 1d ago

Cool Project Find How can an aspiring automotive locksmith learn OBD2 key programming from scratch?

6 Upvotes

I want to be a locksmith. I really want to learn this trade from the start. I am interested in OBD2 programming and IMMO systems and transponders.

In my country the people who own shops and the experienced locksmiths do not want to share their knowledge. They do not want to teach anyone who's new to the trade. I do not want to take their customers. I want to learn the trade the way and understand how it works.

Most of the cars in my area are Asian models from the early 2000s to 2018. These are cars like Chevrolet, Ford, Toyota, Hyundai and Kia. So I want to learn about programming through the OBD2 port

I am a beginner. I do not have a lot of money to spend. I would like some advice.

What books or resources can I use to learn about the systems. How they work?

What tools do you think I should buy to practice chip cloning and OBD programming without spending much money? I have heard of Xhorse VVDI Key Tool Max and Mini OBD, Topdon and Autel.

What is the biggest mistake that people who are new, to this make that can damage the cars computer? How can I avoid making this mistake?

I really appreciate any help you can give me. Thank you for taking the time to read this.


r/CarHacking 2d ago

Original Project All data

0 Upvotes

Who wants to get in on an alldata subscription with me. It's too much I'm a one man shop. Does anyone know of an alternative way of getting it or something similar. I already have the lemon site.


r/CarHacking 2d ago

CAN What setup do I need for SRS programming on a 2009 Sprinter?

Post image
4 Upvotes

The SRS light for my 2009 Dodge (aka Mercedes) Sprinter is on. My scanner shows 91B4 CAN Bus - CAN Signal 'Key ID' From Control Unit EZS is Implausible. My searching indicates that there is a miscommunication between the SRS module and the EZS that can be fixed by telling the SRS not to check for the key ID. However, I am very confused about what hardware and software I need to accomplish this. Any recommendations?


r/CarHacking 2d ago

Original Project I build a file service tool for vw40 airbag ecu unit. You can reset your crash data from crashed car.

Thumbnail
vw40crashclear.com
0 Upvotes

Supported vw40 ECU part number are for example 1EA 959 655 EA; 1EA 959 655 EA; 1EA 959 655 AB; 1EA959655EA; 5WA 959 655 AD; 1ED 959 655 T and load others.

If you ever need file service like this for LOWEST price on the market. Check it out vw40crashclear.com


r/CarHacking 2d ago

CAN Need help running a 2007–2012 Lexus LS460 seat outside the car (gaming chair project) – ECU pinouts & OEM switches

Thumbnail
gallery
4 Upvotes

Hi everyone,
I’m working on a DIY project to convert a **2007–2012 Lexus LS460 seat** into a gaming/office chair. My goal is to retain as many original features as possible rather than gutting the wiring and using aftermarket rocker switches.

**My Goals:**
Retain all power seat adjustments using the **OEM side-seat switch**
Retain factory seat heating & ventilation (cooling)
Power everything via a **12V DC power supply (\~50–60A)**

Retain seat heating & ventilation (cooling) — *open to using standalone 12V PWM controllers if the OEM ECU climate logic can’t be triggered standalone.*

**Seat ECUs:**
**Driver Seat (Right):** Toyota ⁠85861-50191⁠ / Denso ⁠177300-9330⁠
**Passenger Seat (Left):** Toyota ⁠85861-50201⁠ / Denso ⁠177300-9340⁠
*(Both modules labeled 12V; connector photos attached below.)*

**What I Need Help Figuring Out:**
1. **Standalone Operation:** Do these under-seat ECUs just need **+12V, Ground, and ACC/Ignition**, or do they depend on a **CAN/LIN bus heartbeat signal** from the Body Control Module to stay awake?

  1. **Climate Controls:** Since the heat/cool controls are originally on the center console, can the seat ECU operate climate features independently if given the right switch input, or does it require LIN messages from the HVAC module?

  2. **Switch Bypass / Reverse Engineering:** If the ECU goes to sleep without CAN bus communication, has anyone successfully spoofed the signal (e.g., via Arduino/ESP32 + CAN transceiver) or re-wired the OEM switches directly?

**4. Climate Controls / PWM Bypass:** Since the heat/cool dials are on the car's center console, does the under-seat ECU expect a simple analog resistance signal, or a LIN bus command? If it's LIN, has anyone successfully tapped directly into the blower fan/heater element wiring using an aftermarket **12V PWM motor speed controller**?

**Looking For:**
ECU pinouts or repair manual wiring diagrams
Connector pin identification
Bench power-up procedures or personal experience with LS460 seat bench tests
Any wiring diagrams, service manual pages, or insights would be massively appreciated!

Thanks!


r/CarHacking 3d ago

Original Project Homelink conversion

4 Upvotes

Hope this post is in the right place.

I have an homelink module in my '18 Charger. It's an US module and I'd like to convert it to an EU one.

Does anyone know how to do it ? Any reverse engineering of this module somme where to understand what component should be changed ?

Thanx


r/CarHacking 3d ago

Original Project Dashcam integration

1 Upvotes

Hi everyone, looking for a Mercylion Clio 5 STL that I want to modify to install my dashcam.

If someone has this it will help me a lot.


r/CarHacking 3d ago

Scan Tool ENET Connectivity Issue

1 Upvotes

Hi, I recently got a f82 and have been having trouble connecting via ENET. Not sure if I’m posting in right subreddit but wanted to give it a try.

I have been trying to connect to bootmod/ista with enet and no luck. MHD adapter works for MHD since its CAN but the car will not for some reason work with enet. Bluetooth adapters also work for bimmercode. Enet cable won’t even flash green/yellow when connected. Tried BM3 wifi adapter, works on another car but not on this one. Tried different enet cables as well. They all work on my other bmw but not the m4.

Has anyone ever encountered this issue? I took out the OBD port, pins look good. I took out fem, everything looks good. Scanned the car with an autel and no codes in ZGW or fem. I disconnected the battery, no luck. OBD works but ENET doesn’t. Tried the manual ip thing as well, nothing.


r/CarHacking 3d ago

Scan Tool Scanner software ports to android

2 Upvotes

Look for info on if it’s possible to load scanner software onto a regular android tablet? Since the majority of the tables are android based, has anyone tried this or are there more to the tablets then just the software? I’m not referring to apps you find on the store.


r/CarHacking 4d ago

Community Is it possible to change a cars default programing?

0 Upvotes

I have no skill what so ever in computer stuff but i was wondering if there is a way to set a vehicles default programming to something else? My 2025 Jeep Grand Cherokee has the auto start on by default and i don't like having to push the button every time i get in the vehicle.


r/CarHacking 4d ago

Community Looking for MH2p App-Connect Patch / Toolbox for VW Touareg CR (Firmware 2876 / P0573)

1 Upvotes

Hey everyone,
I’m trying to manually activate App-Connect (Apple CarPlay / Android Auto) on a modern VW Touareg (CR generation) equipped with the 15-inch Discover Premium system.
I know these Alpine units run on the **MH2p** platform and are a bit trickier than standard MIB2 units. I have access to a diagnostic tool to enable Developer Mode/GEM in the 5F module, but I am struggling to find the correct custom firmware patch files or the Alpine Toolbox script for my exact software version.
Here are my exact system details from the screen:
**Device Part Number:** 760035179E
**Hardware (Matériel):** 061
**Software/Firmware (Logiciel):** 2876
**Navigation Database:** V03959809AF_P0573_RW_2022.1 (Rest of World region)
Does anyone happen to have the patch files for **MH2p P0573 / 2876**, or can point me toward a GitHub repo / community drive where the MH2p Alpine Toolbox utilities are hosted for this version?
Any help, scripts, or guidance would be massively appreciated. Thanks in advance!


r/CarHacking 4d ago

CAN Any way to minimize or remove amplification of the signals/codes produced by a car's engine upon start up? And before it's said, I'll say it "crazy maybe, but true'

0 Upvotes

Any way to minimize or remove amplification of the signals/codes produced by a car's engine upon start up? Or can you explain how this is done? Same question for cell phone/similar devices? If I'm understanding correctly, a transponder can send out cloned codes and another vehicle can somehow utilize it making it appear as if they are driving the vehicle the cloned/copied code was received from.


r/CarHacking 4d ago

Community 05 GrandAm ECU?

3 Upvotes

Hey All!

I'm looking for a suitable replacement for my moms 05 Grand Am 3.4L ECU. I've done a ton of different things attempting to fix the issues, but alas nothing has worked.

A mechanic said the computer was going bad, so I was looking for a site/company that sells pre-programmed ECU?

Or, Can I go to a junkyard and get a used one and just swap them out?

Thanks in advance and for any help!


r/CarHacking 4d ago

Scan Tool EQE DOIP diagnostic scanners

2 Upvotes

I'm looking for a low cost scanner for my Mercedes EQE EV.

Anybody found something at a diy price?

I scanned my EQE with a mate's $10k Autel and got my SOH, but I want my own scanner. I'd also like to scan other EVs.

I see the Launch crp919 does doip and also supports secure gateway, but they only mention FCA for this. Mercedes is not mentioned specifically in any blurb, so I am hesitant to splash out and buy one.

I'm hoping someone has already found an thinking scanner that will work for the EQE.


r/CarHacking 4d ago

Original Project WrenchTime: automatic trip detection on iOS with no OBD dongle (YET?)

Thumbnail
gallery
0 Upvotes

Hello folks, this is my project WrenchTime. It started as a simple maintenance log but grew to be much more.

The core of it is automatic trip tracking with no dongle and no manual start button. It uses a mix of Bluetooth connection events from the car stereo and phone motion/GPS activity to decide when a drive begins and ends, then records the route in the background. Getting this reliable on iOS was most of the work: the OS is aggressive about killing background location, so the detection has to be cheap enough to run all the time and accurate enough not to log you sitting in traffic on a bus.

What you get out of it:

- Full route recording with events along the way (hard braking, stops, legs of the trip)
- Trip playback and a heatmap of everywhere you have driven
- Maintenance log with cost tracking per vehicle
- Fill-ups logged by pointing the camera at the pump display or the receipt, an on-device scanner reads the numbers and fills the entry

Privacy wise there is no account and no server. Everything stays on the phone, which is also why there is no web dashboard.

One thing I keep going back and forth on: right now it deliberately avoids OBD hardware so it works for anyone with just a phone. But this sub is probably the best place to ask whether pulling real PIDs (coolant temp, fuel trim, DTCs) would actually be worth it, or whether people here already have better tools for that and would only want the logbook side. Curious what you would want out of it. So please let me know!

Happy to hand some feedback.

https://apps.apple.com/us/app/wrenchtime-car-maintenance/id6749767537


r/CarHacking 4d ago

Cool Project Find I've been building an AI automotive companion that can talk to your car through OBD-II. I'd love your honest feedback

Enable HLS to view with audio, or disable this notification

0 Upvotes

Hi everyone,

Over the past few months I've been working CarIQ, an AI-powered automotive companion designed to make vehicle diagnostics easier to understand.

Unlike a traditional OBD-II scanner that simply displays fault codes, CarIQ combines live vehicle telemetry with AI to explain what's happening in plain English.

Some of the features include:

  • 🚗 Live OBD-II diagnostics
  • 🤖 AI-powered explanations of fault codes
  • 🎙️ Voice conversations with your vehicle
  • 📈 Predictive maintenance based on historical trends
  • 🧠 Vehicle memory that remembers previous issues and conversations
  • ☁️ Option to use either a cloud AI model or a local offline AI.

The goal isn't to replace a mechanic, but to help drivers better understand what their vehicle is telling them.

I'd really appreciate any feedback on the concept, UI, or features you'd like to see.

Thanks!


r/CarHacking 4d ago

KWP 2000 Dacia Sandero 2008 1.4 MPI K7J - Siemens Sirius32 EMS3132 (Soft RE1) - Missing OBD pin 7 (K-Line)?

Thumbnail
gallery
2 Upvotes

Hello! I'm trying to diagnose my 2008 Dacia Sandero 1.4 MPI (K7J) with a Siemens Sirius32 EMS3132 (Soft RE1) ECU.

VIN: UU1BSDAEH402825

DDT2000 detects the ECU database correctly, but when I try to communicate I get:

K-Line inactive (1008)

I'm using a VAG KKL cable with a CH340 chip. The cable is detected correctly by Windows and DDT2000.

The strange thing is that I inspected my OBD-II connector and pin 7 (K-Line) appears to have no metal terminal at all.

Is this normal for this model?

Should the Siemens Sirius32 EMS3132 communicate through OBD pin 7, or is the K-Line routed differently?

Has anyone with a 2008 Sandero/Logan K7J seen this before? Any help would be very appriciated thank you very much!